Symptom
Symptom 1:
While creating or editing communication arrangements, you do not see the correct certificate assigned to the user corresponding to the "Communication Method" selected. The Edit Credentials screen only displays one certificate constantly regardless of the communication method you selected, as shown in following screenshot:
Symptom 2:
You wants to upload a user's authentication certificate for a specific communication method you selected or you wants to maintain multiple certificates for the same user using the Edit Credentials screen. But it is not possible because of issue (Symptom 1).
Environment
SAP Business bydesign
Reproducing the Issue
Steps for Symptom A:
- Go to Application and User Management work center
- Go to Communication Arrangement view
- New or Existing Communication Arragement
- Go to Define Technical Data step
- Select a Communcation Method
- Now, Select Edit Credentials button besides User ID
- Then Certificate sub tab, where you will find the certificate details
- Now, select another Communication Method and Edit Credentials
- You will find the same certificate details as in step 7
Cause
The Edit Credentials screen displaying only one certificate of the user. If there are multiple certificates assigned to the user, it displays the first instance it finds. It was not designed to distinguish certificates based on the communication method you selected.
Resolution
You may consider one of the below workaround
A) Get the list of certificates assigned to a user
To see the list of assigned certificates of a user, you can go to Application and User Management → Communication Certificates. This list is the source of truth of the certificates assigned to the user for certificate based authentication.
B) Uploading new certificates for a user
- Use of "Upload Certificate" button in the Edit Credentials screen is not recommended for such communication methods, as this action cannot be used to upload more than one certificates for the same user. Using the "Upload Certificate" button without removing the existing certificate will overwrite the existing certificate with the new certificate. This action can be used to maintain only one certificate for a user.
- The "Remove Certificate" button will remove all the assigned certificates from the user, including the ones not listed in the Edit Credentials UI. Therefore, please be careful on using this action.
- For such communication scenarios, it is handled within SAP Business ByDesign to deliver the certificates to the user during release/hotfix upgrade cycles and on adhoc basis as necessary when the certificates are updated.
- For exceptional cases, which is not covered by the above point, where you need to assign more than one certificates to a user, please reach out to the SAP support. They would forward the request to the team owning the communication scenario who would handle your request.
Keywords
certificate, communication method, user, user id, certificate, correct certificate, internal error , KBA , certificate , communication method , correct certificate , SRD-CC-SEC , Security , AP-RC-CEC-B2B , ByD On-Demand Cloud-Process Integration B2B , Problem