Home
SAP BTP and On-Premise Integration via Cloud Connector
Set up secure connectivity between SAP BTP and your on-premise SAP systems with the SAP Cloud Connector. This enables iCWP OData services to be consumed on BTP without exposing inbound firewall ports.

Title and Copyright
Copyright and Terms of Use page for iMaintenance Installation.
Preface
Understand audience, know related documents and products and conventions followed in this document.
Introduction
The iMaintenance Deployment & Setup Guide gets iMaintenance running safely in your enterprise landscape.
Foundation Setup for iMaintenance Deployment
Before iMaintenance can connect to SAP and expose APIs, the core environment must be initialized. This setup includes seeding MongoDB with configuration data, enabling SAP inbound services, mapping dependencies, and starting the microservices that power the application.
Configure SAP iMaintenance Roles and Authorizations
Before iMaintenance can integrate with SAP, specific roles and authorizations must be configured. These roles control access to master data, transactional posting, and integration endpoints.
Secure API Access with IP Whitelisting
Secure connectivity for Innovapptive-hosted applications is enforced by restricting inbound traffic to trusted client IPs and permitting outbound traffic only to approved Innovapptive domains. This ensures that only authorized systems can exchange data with iMaintenance while preventing unauthorized access.
Install Supporting Systems and iCWP Integration Suite
Enable SAP NetWeaver Gateway and configure virus scan handling so iCWP OData services can run securely.
SAP BTP and On-Premise Integration via Cloud Connector
Set up secure connectivity between SAP BTP and your on-premise SAP systems with the SAP Cloud Connector. This enables iCWP OData services to be consumed on BTP without exposing inbound firewall ports.
- Validate Prerequisites
  Confirm that your environment meets the technical and access requirements before installing the SAP Cloud Connector.
- Install SAP Cloud Connector
  Install the SAP Cloud Connector on the designated on-premise server to enable secure communication between your SAP systems and BTP.
- Connect Cloud Connector to BTP Sub-Account
  Connect the installed Cloud Connector to your SAP BTP subaccount to establish trust between the on-premise system and BTP.
- Configure On-Premise System Mapping
  Map your on-premise SAP system in Cloud Connector so BTP can reach the required internal host and port.
- Add OData Service Endpoints Under Connected System
  Add the required OData service endpoints under the connected SAP system in Cloud Connector so BTP can access iCWP services securely.
- Test the Connection from BTP
  Verify that your Cloud Connector is correctly connected to the BTP sub-account.
Configure API Management in SAP BTP
Create an API Proxy in SAP BTP to expose iCWP OData services from your connected SAP system. The proxy uses the API Provider details from Cloud Connector and makes the service available for policy enforcement and external consumption.
Configure OAuth 2.0 Authentication
Enable OAuth 2.0 authentication in SAP API Management so external consumers can securely obtain and use access tokens when calling iCWP APIs.
Handle CSRF Tokens in API Management
Enable server-to-server authentication between SAP API Management and the backend system, so API consumers don’t need direct backend credentials.
Troubleshoot API Errors and Metadata Issues

SAP BTP and On-Premise Integration via Cloud Connector

Set up secure connectivity between SAP BTP and your on-premise SAP systems with the SAP Cloud Connector. This enables iCWP OData services to be consumed on BTP without exposing inbound firewall ports.

As part of this, do the following:

Install and configure the SAP Cloud Connector to establish a secure tunnel between BTP and your network.
Map on-premise SAP systems to BTP subaccounts so ECC and S/4 systems can be registered for controlled access.
Define access control rules for iCWP OData services to restrict which services BTP is permitted to reach.
Validate connectivity from BTP destinations to confirm that iCWP can successfully consume SAP Gateway endpoints.

By completing these steps, you create a secure, controlled channel where iCWP services hosted on BTP can consume data from your on-premise SAP systems without compromising network security.