Create an RFC trust relationship between 2 SAP systems - A step-by-step guide

Purpose

The Purpose of this page is to illustrate with detailed step-by-step instructions and screenshots how you can setup a Trusted/Trusting Relationship between 2 SAP ABAP systems.

Overview

This page explains in detail how to create a trusted connection between 2 systems: ABC Client 100 & XYZ Client 100.

Creating the RFC destination on the ABC client 100

Logon to ABC – go to transaction SM59 and create an RFC destination:

1. RFC Destination: XYZ_TRUST
2. Connection Type 3: ABAP Connection
3. Description: Trusted RFC connection for XYZ System Client 100
4. Target host: <target hostname>
5. System Number: Instance number of XYZ
6. Gateway Host: Recommended to provide the gateway host
7. Gateway Service: sapgw<nn> where <nn> is the instance number of XYZ
8. Under the Logon & Security tab:
9. Enter the Language
10. Enter the client
11. User: Specify a user with Admin access (SAP_ALL / SAP_NEW) on XYZ
12. Password: Password for above user
13. Trust Relationship: No
14. Save and perform an authorization test (Ctrl + F4)

Creating the RFC destination on system XYZ client 100 system

1. Logon to the XYZ Client 100 system – go to transaction SM59 and create an RFC destination:
2. RFC Destination: ABC_TRUST
3. Connection Type 3: ABAP Connection
4. Description: Trusted RFC connection for ABC System Client 100
5. Target host: <target hostname>
6. System Number: Instance number of ABC
7. Gateway Host: Recommended to provide the gateway host
8. Gateway Service: sapgw<nn> where <nn> is the instance number of ABC
9.  Under the Logon & Security tab:
10. Enter the Language
11. Enter the client
12. User: Specify a user with Admin access (SAP_ALL / SAP_NEW) on ABC
13. Password: Password for above user
14. Trust Relationship: No
15. Save and perform an authorization test (Ctrl + F4)

Maintain the trusted system details in the ABC system (transaction SMT1)

In transaction SMT1 create an entry for the trusted system by providing the RFC destination XYZ_TRUST and then Save in the subsequent screen

Edit the RFC destination XYZ_TRUST under the Logon & Security tab with the below details:

• Language: EN
• Client: 100
• Check the “Current User” checkbox
• Trust Relationship: Yes

Save and then perform an authorization test (Ctrl + F4)

Maintain the trusted system details in the XYZ system (transaction SMT1)

In transaction SMT1 create an entry for the trusted system by providing the RFC destination ABC_TRUST and then Save in the subsequent screen

Edit the RFC destination ABC_TRUST under the Logon & Security tab with the below details:

• Language: EN
• Client: 100
• Check the “Current User” checkbox
• Trust Relationship: Yes

Save and perform an authorization test (Ctrl + F4)

Authorizations required for RFC trust relationship to work

The above RFCs will work provided you have the s_rfcacl authorisation object access with the following values mentioned in the respective systems:

( > Release 7.02):

On the ABC system:

• RFC_SYSID : XYZ
•  RFC_CLIENT: 100
•  RFC_USER  : ' '
•  RFC_EQUSER: Y (for Yes)
•  RFC_TCODE : *
•  RFC_INFO  : #########  ( installation number of the XYZ)
•  ACTVT     : 16

On the XYZ system:

• RFC_SYSID : ABC
•  RFC_CLIENT: 100
•  RFC_USER  : ' '
•  RFC_EQUSER: Y (for Yes)
•  RFC_TCODE : *
•  RFC_INFO  : #########  ( installation number of the ABC)
•  ACTVT     : 16

The trust relationship between the ABC system and XYZ system should now be properly established

Related Content:

SAP Note 128447  "Trusted/Trusting Systems"

SAP Note 1627901 "Authorization group for Trust Relationship

SAP Note 1491645  "Unauthenticated system access via RFC or HTTP"

SAP Note 131387  "No authorization to log on as a trusted system"

SAP Note 1562697  "Authorization group for trust relationship"

Setting Up a Trusted Relationship between two SAP ABAP Systems