SAP how-to guides · LessonBy Arjun, SAP Solution Architect · Published · SAP S/4HANA 2023 · all levels
Configure RFC
An RFC destination defines how SAP connects to another system for remote calls. This guide shows how to create and test one (SM59).
Quick answer
Use a least-privilege service user, not a dialog user with broad access, RFC is powerful and a known attack path.
Key takeaways
- Enter transaction SM59 and choose the connection type (e.g. ABAP connection, TCP/IP, HTTP).
- Enter the target host/system and connection parameters.
- Configure the logon: a least-privilege service user and its credentials (or trusted-system).
- Watch out: Following steps without understanding the concept.
Step by step
- Enter transaction
SM59and choose the connection type (e.g. ABAP connection, TCP/IP, HTTP). - Enter the target host/system and connection parameters.
- Configure the logon: a least-privilege service user and its credentials (or trusted-system).
- Set security options (SNC/TLS where applicable).
- Use the built-in Connection Test to verify it works.
Notes and tips
Use a least-privilege service user, not a dialog user with broad access, RFC is powerful and a known attack path. Secure the connection (SNC/TLS) and the gateway. After a system copy, destinations inherit the source’s settings and must be corrected. The connection test quickly reveals network/logon problems.
Common pitfalls
- Following steps without understanding the concept.
- Skipping testing in a non-production system.
- Applying blindly to a different scenario.
Practice challenge
+0 XPStreak ×0
Question 1 of 3
Which statement is true of Configure RFC?
Frequently asked questions
What does the term Configure RFC refer to in SAP?
An RFC destination defines how SAP connects to another system for remote calls. This guide shows how to create and test one (SM59).
Which transaction codes come up with Configure RFC?
Enter transaction SM59 and choose the connection type (e.g. ABAP connection, TCP/IP, HTTP). Enter the target host/system and connection parameters. Configure the logon: a least-privilege service user and its credentials (or trusted-system).
What else is worth knowing about Configure RFC?
Use a least-privilege service user, not a dialog user with broad access, RFC is powerful and a known attack path.
What tends to go wrong with Configure RFC?
Following steps without understanding the concept. Skipping testing in a non-production system. Applying blindly to a different scenario.