SAP Configure RFC
An RFC destination defines how SAP connects to another system for remote calls. This guide shows how to create and test one (SM59).
To configure an RFC connection, open SM59, choose the type, ABAP, TCP/IP or HTTP, enter the target host and parameters, set the logon to a least-privilege service user or a trusted-system relationship, add SNC or TLS, and run the Connection Test. Never use a dialog user with wide access, and correct destinations after a system copy.
- Watch out: testing the connection and testing the authorisation are separate checks with separate answers.
Step by step
- Enter transaction
SM59and choose the connection type (e.g. ABAP connection, TCP/IP, HTTP). - Enter the target host/system and connection parameters.
- Configure the logon: a least-privilege service user and its credentials (or trusted-system).
- Set security options (SNC/TLS where applicable).
- Use the built-in Connection Test to verify it works.
Notes and tips
Use a least-privilege service user, not a dialog user with broad access, RFC is powerful and a known attack path. Secure the connection (SNC/TLS) and the gateway. After a system copy, destinations inherit the source’s settings and must be corrected. The connection test quickly reveals network/logon problems.
Common pitfalls
- Following steps without understanding the concept.
- Skipping testing in a non-production system.
- Applying blindly to a different scenario.