Home
Install Supporting Systems and iCWP Integration Suite
Enable SAP NetWeaver Gateway and configure virus scan handling so iCWP OData services can run securely.
Activate and Configure SAP NetWeaver Gateway
Enable SAP NetWeaver Gateway to run iCWP OData services and configure virus scan handling as per your security policy.

Title and Copyright
Copyright and Terms of Use page for iMaintenance Installation.
Preface
Understand audience, know related documents and products and conventions followed in this document.
Introduction
The iMaintenance Deployment & Setup Guide gets iMaintenance running safely in your enterprise landscape.
Foundation Setup for iMaintenance Deployment
Before iMaintenance can connect to SAP and expose APIs, the core environment must be initialized. This setup includes seeding MongoDB with configuration data, enabling SAP inbound services, mapping dependencies, and starting the microservices that power the application.
Configure SAP iMaintenance Roles and Authorizations
Before iMaintenance can integrate with SAP, specific roles and authorizations must be configured. These roles control access to master data, transactional posting, and integration endpoints.
Secure API Access with IP Whitelisting
Secure connectivity for Innovapptive-hosted applications is enforced by restricting inbound traffic to trusted client IPs and permitting outbound traffic only to approved Innovapptive domains. This ensures that only authorized systems can exchange data with iMaintenance while preventing unauthorized access.
Install Supporting Systems and iCWP Integration Suite
Enable SAP NetWeaver Gateway and configure virus scan handling so iCWP OData services can run securely.
- Verify Dependent Systems Installation
- Install and Verify iCWP Integration Suite Add-Ons
  Install the iCWP Integration Suite add-ons using SAP’s standard procedure and verify deployment in ECC and Gateway and then validate them using the steps shown below.
- Activate OData Services
  Enable iCWP integration by activating the OData service, configuring the system alias where required, clearing SAP Gateway caches, and validating service responses.
- SAP Transactions and Tables Reference
  Use this reference to quickly locate the SAP transactions and database tables most relevant for iCWP and iMaintenance operations.
- Activate and Configure SAP NetWeaver Gateway
  Enable SAP NetWeaver Gateway to run iCWP OData services and configure virus scan handling as per your security policy.
SAP BTP and On-Premise Integration via Cloud Connector
Set up secure connectivity between SAP BTP and your on-premise SAP systems with the SAP Cloud Connector. This enables iCWP OData services to be consumed on BTP without exposing inbound firewall ports.
Configure API Management in SAP BTP
Create an API Proxy in SAP BTP to expose iCWP OData services from your connected SAP system. The proxy uses the API Provider details from Cloud Connector and makes the service available for policy enforcement and external consumption.
Configure OAuth 2.0 Authentication
Enable OAuth 2.0 authentication in SAP API Management so external consumers can securely obtain and use access tokens when calling iCWP APIs.
Handle CSRF Tokens in API Management
Enable server-to-server authentication between SAP API Management and the backend system, so API consumers don’t need direct backend credentials.
Troubleshoot API Errors and Metadata Issues

Activate and Configure SAP NetWeaver Gateway

Enable SAP NetWeaver Gateway to run iCWP OData services and configure virus scan handling as per your security policy.

To activate the SAP NetWeaver Gateway:

In transaction SPRO, open SAP Reference IMG and navigate to SAP NetWeaver, SAP Gateway > OData Channel > Configuration > Activate or Deactivate SAP NetWeaver Gateway.
Select Activate to enable the Gateway framework.

Set the following profile parameters as required:


Parameter	Value / Recommendation	Purpose
`login/create_sso2_ticket`	`2`	Enable SSO ticket creation
`icm/HTTPS/verify_client`	`1`	Enforce client certificate check
`icm/HTTPS/verify_client_with_issuer`	`CN=*`	Restrict trusted issuers

Configure Virus Scan Handling

Open transaction /IWFND/VIRUS_SCAN.
If a virus scan profile is available, assign it to enforce file scanning for uploads and attachments.
If no profile is available, Select the Virus Scan Switched Off check box and execute.

Use this only as a temporary measure, with explicit approval from your IT security team.

SAP NetWeaver Gateway is activated, required profile parameters are applied, and virus scan handling is configured either with a valid scan profile (recommended) or temporarily disabled under approved exception.