3694740 - IBP: Clarification on email "Action Required: API Call Security Improvements"

• Received email with title "Action Required: API Call Security Improvements" with the content:

  "We are contacting you due to an upcoming change with SAP Integrated Business Planning API calls that will affect you.
  Examples of commonly used API calls are:

  SAP_COM_0064
  SAP_COM_0066
  SAP_COM_0072
  Currently, API calls can be directed to either the UI host (default URL, example: my123456.scmibp.ondemand.com) or the API host (example: my123456-api.scmibp.ondemand.com) using basic authentication or with certificate-based authentication.
  As you may already know, in release 2602 we will disallow communications users from authenticating on the default URL and we will also disable basic authentication on the default URL. This is part of our continuous efforts to make IBP more secure.
  This will cause all API calls to fail that are incorrectly directed to the default URL.
  According to our logs, you have the communications scenarios set to the default URL. Please review your configuration on all IBP tenants and direct all calls to the API host."

• The above described changes will cause all API calls to fail that are incorrectly directed to the default URL.

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental." 

SAP Integrated Business Planning

sap integrated business planning, api call failure, default url, api host, communication arrangements app, release 2602, security improvements, basic authentication disabled, api-url configuration, sap_com_0064, sap_com_0066, sap_com_0072, what actions, needed, , KBA , SCM-IBP-INT-ODT , IBP Master Data and Transactional Data API services , SCM-IBP-SEC-VF , Permission Filters , SCM-IBP-JOB , Job Scheduling , SCM-IBP-INT-TS , Time-Series-Based Integration , Product Enhancement