3284822 - Third party system provider requests a password to enable communication with SAP Business Bydesign

During the setup of a communication arrangement, authentication method SSL Client Certificate with SAP Business ByDesign system key pair is selected. In such a case, a private key of the key pair is stored in the communication arrangement. Public key has to be extracted by click on button Download. This public key has to be implemented in the third party system for encrypting and accepting the XML messages.

But in some cases, the third party system provider also requests the password. It is not clear why this happens and whether this is justified or not. Making the provider aware of the password might also raise some concerns regarding data protection.

SAP Business ByDesign

external, partner, encryption, p12, SSL certificate based authentication , KBA , external , encryption , p12 , ssl certificate based authentication , SRD-CC-SEC , Security , Problem