SAP Internet Transaction Server Thomas Ryan Product Manager

SAP Internet Transaction Server Thomas Ryan Product Manager SAP Markets ã SAP AG 2001, Title of Presentation, Speaker Name 1

Agenda 1 2 Architecture 3 ITS Programming Models 4 Scalability 5 6 7 ã Introduction Security and Single Sign-On ITS Platforms More Information SAP AG 2001, Title of Presentation, Speaker Name 2

What is an Internet Application? SAP Application Internet Application Powerful, but complex (built to handle all possible situations) Simple! Designed for the professional user Designed to be used by everyone (large number of users) Requires a trained user No user training required Take advantage of Internet technology and multimedia ã SAP AG 2001, Title of Presentation, Speaker Name 3

SAP R/3 and the Web: The Task Browser Intranet Browser Firewall Web Server Internet ITS Browser PC Browser ã SAP AG 2001, Title of Presentation, Speaker Name 4 PC GUI SAP System

SAP R/3 and the Web: The Solution Browser Intranet Browser Firewall Web Server Internet ITS Browser PC Browser ã SAP AG 2001, Title of Presentation, Speaker Name 5 PC GUI SAP System

SAP Internet Transaction Server Extends the reach of SAP systems into the Web by mapping SAP screens to HTML, WML, or similar Web formats Drives transactions within the SAP system or calls function modules from SAP n Application server sees a SAP GUI Separation of business logic and visual appearance Supported through release upgrades ã SAP AG 2001, Title of Presentation, Speaker Name 6

How to Offer a Service on the Web? ITS SAP System Web Server Browser WGate AGate MIME Files Service Files • Images • Service description Outside • HTML SAP Templates R/3 • Videos • Sound • Language Resource HTML Visualization • . . . Files SAP@Web • Flow Files Studio or ABAP Workbench ã SAP AG 2001, Title of Presentation, Speaker Name 7 Application • ABAP • Dynpro Screens Inside SAP R/3 • Customization Business Logic ABAP Workbench

Agenda 1 2 Architecture 3 ITS Programming Models 4 Scalability 5 6 7 ã Introduction Security and Single Sign-On ITS Platforms More Information SAP AG 2001, Title of Presentation, Speaker Name 8

TCP/IP AGate NSAPI ISAPI Apache Module CGI WGate Components and Interfaces DIAG RFC ITS ã SAP AG 2001, Title of Presentation, Speaker Name 9

WGate and AGate WGate n Encapsulates the various supported HTTP server interfaces such as u CGI (Common Gateway Interface) u NSAPI (Netscape Server Application Programming Interface) u ISAPI (Internet Server Application Programming Interface) n In a transparent manner n Passes the requested data to the AGate component n Receives the HTML pages from AGate in a secure way ã SAP AG 2001, Title of Presentation, Speaker Name 10 AGate n Is the main component of ITS n Is responsible for session management including u Mapping of SAP R/3 screens or function modules to HTML u Web session timeout handling u SAP R/3 connection management u Generation of HTML documents

Architecture – ITS Load Service File User Request Call WGate Send Prepared Request R/3 Input WGate Browser SAP R/3 Internet Application Component AGate R/3 Output Web Server HTML Templates HTML Page SAP System Styles BAPI HTML Page SAP R/3 Data Load HTML Template or Style ã SAP AG 2001, Title of Presentation, Speaker Name 11

Installation Methods Single Host Installation n WGate and AGate are installed on the same physical server n Scope u Intranet Dual Host Installation n WGate and AGate are installed on different physical servers n Scope u u WGate Webserver AGate ã SAP AG 2001, Title of Presentation, Speaker Name 12 Security (firewalls) High availability/ Load balancing WGate AGate Webserver

Virtual ITS Central ITS Server ITS DEV ITS Virtual Web Servers ã ITS CON ITS PRD SAP AG 2001, Title of Presentation, Speaker Name 13 Virtual HTTP Servers enable several complete ITS instances to be installed on one physical server

Virtual ITS Instances SAP R/3 Development DEV Transport IAC Customizing Templates Central ITS Server SAP R/3 Consolidation QAS ITS DEV ITS Web Server ITS QAS ITS PRD Transport SAP R/3 Production PRD ã SAP AG 2001, Title of Presentation, Speaker Name 14 IAC Customizing Templates

Agenda 1 2 Architecture 3 ITS Programming Models 4 Scalability 5 6 7 ã Introduction Security and Single Sign-On ITS Platforms More Information SAP AG 2001, Title of Presentation, Speaker Name 15

Different Programming Models Growing learning effort, more features Flow Logic *IAC: Internet Application Component IACs* SAP GUI for HTML (implicit) HTML Functions Flow Files HTML Templates HTML Functions R/3 based dialog flow Web Server Browser ã SAP AG 2001, Title of Presentation, Speaker Name 16 ITS Non-SAP R/3 based dialog flow SAP System

SAP R/3 -Based Dialog Applications Business logic and dialog flow reside in SAP R/3 (system) Presentation layer is strictly separated and resides on ITS Communication between ITS and application is carried out via data fields on SAP screens ITS places the data field content into the HTML template and creates a complete HTML page is sent to the Web browser (via Web server) HTML templates reside outside SAP but are included in SAP Source Control SAP@Web Studio supports development of HTML templates ã SAP AG 2001, Title of Presentation, Speaker Name 17

SAP Screens Correspond to HTML Pages ITS provides the mapping with HTML template ã SAP AG 2001, Title of Presentation, Speaker Name 18 or without HTML template

SAP Screens vs. HTML Template Usage SAP GUI for HTML maps SAP screens to HTML files Simple, SAP R/3 screen-based layout Limited graphical layout mechanisms can be used via HTML styles technique (for example, font size, or background color) 1: 1 mapping from SAP screen fields (for example, text or input fields) to SAP GUI for HTML fields No special techniques applicable For example, dynamic help texts that open on mouse-click or mouse-over No development effort ã SAP AG 2001, Title of Presentation, Speaker Name 19 HTML templates allow a different look and feel for a Web application Flexible layout Template and MIME usage allow arbitrary layout techniques Flexible field mapping Fields with default values can be hidden from the Web page Special functionality can be implemented Pull-down help texts, for example Additional development effort HTML templates need to be designed and published, additional functions need to be implemented

Mapping R/3 screens to Web pages 0 0 0 1 n e e cr e e r c S S 0 100 e t pla m L Te HTM e g a p eb W ã SAP AG 2001, Title of Presentation, Speaker Name 20 0 100 ITS 0 0 0 n 3 m L Te 30 e t la 00 p HTM 0 a p b We 0 0 3 ge

ITS Flow Logic Separation of: n Business logic, n Presentation logic n Dialog flow logic Modeling the dialog flow as a network of states Population of HTML templates with data Handling of user interface events n Events can trigger state transitions n States can trigger data-providing module Bottom Line Allows you more flexibility with look and feel of your Internet applications without ever changing the business logic ã SAP AG 2001, Title of Presentation, Speaker Name 21

Agenda 1 2 Architecture 3 ITS Programming Models 4 Scalability 5 6 7 ã Introduction Security and Single Sign-On ITS Platforms More Information SAP AG 2001, Title of Presentation, Speaker Name 22

ITS Benefits From SAP R/3 Scalability Efficient transaction management n Multiple work processes n Load balancing Database buffering n Database tables (material master and sales text, for examples) can be buffered on application server to achieve fast access to data SAP R/3 can handle thousands of dialog users ã SAP AG 2001, Title of Presentation, Speaker Name 23

ITS Performance and Scalability Lightweight multithreaded implementation Compilation and caching of HTML templates Separation of WGate and AGate Achievements: n Large number of concurrent users n Efficient interface to SAP Four-tier architecture of Internet-enabled SAP offers maximum flexibility in terms of scalability ITS as a dedicated SAP solution, provides highly optimized access to SAP application servers ã SAP AG 2001, Title of Presentation, Speaker Name 24

Workthread/Session Model SAP System Dispatcher R/3 In Port Pool of Workthreads AGate ã SAP AG 2001, Title of Presentation, Speaker Name 25 Session Pool

Web Server/ITS Scalability SAP System WGate Browser Web Server AGate WGate Browser Web Server l One WGate passes requests on to one AGate l One AGate can be connected to several Web servers/WGates ã SAP AG 2001, Title of Presentation, Speaker Name 26

ITS Scalability SAP System WGate Browser Web Server WGate Browser AGate Web Server l Several ITSs can be connected to the same SAP R/3 system ã SAP AG 2001, Title of Presentation, Speaker Name 27

ITS – SAP R/3 Scalability SAP System Appl. Server WGate Browser AGate Web Server Message Server l One ITS can use several application servers of one SAP R/3 system via: l Load balancing l Separate selection of a specific application server ã SAP AG 2001, Title of Presentation, Speaker Name 28

WGate/AGate Loadbalancing (4. 6 D) SAP System AGate WGate Browser AGate Web Server AGate l WGate just passes requests on to AGate l AGate does the actual work n Session management n HTML page generation n Control caching l CPU utilization of AGate is much higher than WGate l Fault tolerance for AGate ã SAP AG 2001, Title of Presentation, Speaker Name 29

HTTP Routing (SAP R/3 4. 6 D)/High Availability AGate Web Server Browser HTTP Router WGate Web Server ã SAP AG 2001, Title of Presentation, Speaker Name 30 AGate

ITS Watchdog Service n NT or Win 2000 service, installed on WGate, has following tasks: u Monitors all ITS instances performing tests periodically u Recognizes ITS instances and their administration URLs and Web servers and registers them within an LDAP directory (optional) u Activates or deactivates all corresponding port rules depending on test results (optional) n Initially implemented for Microsoft Network Load Balancing (NLB/ WLBS) n Will also work with other load balancing products First customer shipment with ITS 4. 6 DC 4 ã SAP AG 2001, Title of Presentation, Speaker Name 31

How Does ITS Watchdog Work? n ITS Watchdog Service on WGate host periodically calls ITS service ITS_PING through URL http: //localhost/scripts/wgate/ITS_PING/! n ITS_PING service flow file calls RFC function RFC_PING n AGate returns HTML page n Watchdog scans this HTML page for specific pattern (“SAP R/3 Status – OK”) SAP System RFC WGate Web Server ITS Watchdog ã SAP AG 2001, Title of Presentation, Speaker Name 32 AGate Reply page

Agenda 1 2 Architecture 3 ITS Programming Models 4 Scalability 5 6 7 ã Introduction Security and Single Sign/On ITS Platforms More Information SAP AG 2001, Title of Presentation, Speaker Name 33

Internet Security Access control n Network and file access authorization Privacy n Data encryption Authentication n Clear identification of communication parties Integrity n Secure data transfer without falsification ã SAP AG 2001, Title of Presentation, Speaker Name 34

ITS Infrastructure – Security Measures Firewall (optional) SAP System IIS / Netscape WGate server Browser AGate Web Server Web access via HTTPS and SSL ã SAP AG 2001, Title of Presentation, Speaker Name 35 Secure network access via SAP Protocol SNC (Secure Network Communication)

ITS Infrastructure – Security Measures n n n ã Use different machines to separate AGate and WGate Protect your Web server and AGate Server (NT security) Protect the ITS configuration files (NT security) Use firewalls Use HTTPS SAP AG 2001, Title of Presentation, Speaker Name 36

Single Sign-On in the my. SAP. com Workplace Table USREXTID maps 1 Workplace Middleware Workplace server Certificate to SAP R/3 User 2 3 Client and server certificate ensures encrypted channel using “Secure Sockets Layer (SSL)” Protocol Initial authentication against Web Server using X. 509 user certificate Mapping from certificate to user is done by the workplace server Further transactions fired from menu use same steps again ã SAP AG 2001, Title of Presentation, Speaker Name 37

Single Sign-On in the my. SAP Workplace HTML GUI Windows GUI Web. RFC Role-based menu ã SAP AG 2001, Title of Presentation, Speaker Name 38 Any other Web page

Using an X. 509 User Certificate Mechanism protection: n Secure key generation and distribution (registration) n Secure storage for private key n Uses the SSL protocol ã SAP AG 2001, Title of Presentation, Speaker Name 39 Usage conditions: n Enable HTTPS for all Web servers n Provide certificates for all users n Import User Certificate into browser (or connect via Smartcard) n Provide mapping to SAP Userid (use central user maintenance)

Security Consulting Services – Info SAPNet http: //service. sap. com/security http: //service. sap. com/Security. Consulting ã SAP AG 2001, Title of Presentation, Speaker Name 40

Agenda 1 2 Architecture 3 SAP GUI for HTML 4 Scalability 5 6 7 ã Introduction Security & Single Sign On ITS Platforms More Information SAP AG 2001, Title of Presentation, Speaker Name 41

ITS 4. 6 D Server Platforms WGate AGate Microsoft NT 4. 0 Server n Microsoft Web Server (ISAPI) n Netscape Web Server (NSAPI) n Apache HTTP Server (Apache Module) n any CGI Web Server (CGI) Microsoft Windows 2000 Server n Microsoft Web Server (ISAPI) Linux / Intel Microsoft Windows 2000 Server SAP@Web Studio Microsoft NT 4. 0 Workstation Microsoft Windows 2000 Workstation n Apache HTTP Server (Apache Module) WGate ã SAP AG 2001, Title of Presentation, Speaker Name 42 AGate

ITS 4. 6 D Client Platforms In general, IE 4. 01 or higher is required Some applications based on ITS might have a different client platform support: n SAP GUI for HTML requires IE 4. 01 as a minimum n Some applications require a higher version of IE u my. SAP Workplace n Others do support Netscape u support of pre-4. 6 C applications (IACs, such as ESS, Online Store) is application-dependent n All applications will run on MS Internet Explorer 5. 0 x or higher on Windows platforms n There are known issues with IE 5. 5 which are solved with IE 5. 5 SR 1. Ø Recommendation: Use IE 5. 5 SR 1 or above ã SAP AG 2001, Title of Presentation, Speaker Name 43

ITS 6. 10 Server Platforms WGate AGate Microsoft NT 4. 0 Server n Microsoft Web Server (ISAPI) n Netscape Web Server (NSAPI) n Apache HTTP Server (Apache Module) n any CGI Web Server (CGI) Microsoft Windows 2000 Server n Microsoft Web Server (ISAPI) Linux / Intel Microsoft Windows 2000 Server SAP@Web Studio Microsoft NT 4. 0 Workstation Microsoft Windows 2000 Workstation n Apache HTTP Server (Apache Module) XP (32 and 64 bit) currently under evaluation WGate ã SAP AG 2001, Title of Presentation, Speaker Name 44 AGate

ITS 6. 10 Client Platforms In general, IE 4. 01 or higher is required Some applications based on ITS might have a different client platform support: n SAP GUI for HTML requires IE 4. 01 as a minimum n Some applications require a higher version of IE u my. SAP Workplace n Others do support Netscape u support of pre-4. 6 C applications (IACs, such as ESS, Online Store) is application-dependent n All applications will run on MS Internet Explorer 5. 0 x or higher on Windows platforms n There are known issues with IE 5. 5 which are solved with IE 5. 5 SR 1. n IE 6. 0 (with Windows XP) under evaluation n Netscape 6. x (on Windows and Linux platforms) under evaluation ã SAP AG 2001, Title of Presentation, Speaker Name 45

Agenda 1 2 Architecture 3 ITS Programming Models 4 Scalability 5 6 7 ã Introduction Security & Single Sign On ITS Platforms More Information SAP AG 2001, Title of Presentation, Speaker Name 46

Recent Efforts for 4. 6 D (Compilation 4) Solution: Frontend Printing Focus: QA / Provide software which is n Stable, highly available (performance, stability) n Highly scalable (ITS cluster, Watchdog) Focus: Enrich administration and monitoring features n Administer ITS clusters n Add new trace files, make existing trace files better readable Focus: Improve patch production and application ã SAP AG 2001, Title of Presentation, Speaker Name 47

Classroom training: ITS Curriculum BC 400 SAP 50 and ITS 100 ITS 050 ITS 110 ITS 070 ITS 150 ITS 050 (3 Days) SAP Internet Transaction Server: Basics ITS 070 (2 Days) ITS Administration ITS 100 (2 Days) Developing Easy. Web. Transactions ITS 110 (2 Days) Developing Web Scenarios and Mini -Apps using ITS Flow Logic ITS 150 (2 Days) Corporate Identity Design ã SAP AG 2001, Title of Presentation, Speaker Name 48

More Information World Wide Web n http: //www. sapmarkets. com/its n http: //service. sap. com/sap-its SAP Online Help n Basis Frontend Services Internet Transaction Server (BC-FES-ITS) SAP GUI for HTML (BC-FES-WGU) ã SAP AG 2001, Title of Presentation, Speaker Name 49