PUBLIC

Product Management P&I Technology Core PlatformSAP SE

SAP Business Client 6.5: Set-Up

2PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

Contents

Client-side configuration and installation of SAP Business Client for Desktop 6.5 together with SAPGUI for Windows 7.50

• UI Landscape• System connections• Client configuration• Provisioning• Security settings

Server-side configuration• Enable NWBC core functionality• Activate Side Panel• User menus – role maintenance

Further information / links

3PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

4. Create and distributeInternet Explorersecurity options

Installing SAP Business Client for DesktopGeneral approach

Client-side

2. Create and distribute systemconnections* and clientconfiguration

SAP UI LandscapeNwbcOptions.xmlRegistry entries

5. Configure AS ABAP backend

Server-side

HTTP framework, required ICF servicesauthentication, SNC,/UI2/NWBC_CFG_CUST

6. Define user roles

Software Download

1. Download SAPBusiness ClientfromSAP ONE SupportLaunchpad (SAPSoftware DownloadCenter)

3. Install SAP Business Client forDesktop together with SAP GUIfor Windows 7.50

*Fiori Launchpad connection, NWBC connection, SAP logon connection, and SAP shortcut

1. Downloading SAP Business Client forDesktop

5PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

Downloading SAP Business Client 6.5

Download it from the SAP One SupportLaunchpad.

Download

2. UI Landscape: Creating and distributingsystem connection and client configuration

7PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

SAP UI Landscape as default*

LANDSCAPE .XML FOR SAPBUSINESS CLIENT AND SAP GUI FORWINDOWS

As an administrator, you can use the sameinfrastructure to define and distribute systemconnections for usage by SAP GUI forWindows and SAP Business Client.

* SAP UI landscape has been introduced with SAP Business Client 6.0, as well affective for 6.5. With SAP GUI 7.50 SAP UI Landscape formatto store the connection information is now default

SAP UI LANDSCAPE

ADMINCONFIG

USERCONFIG

COMMONCONFIGURATION

8PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

Creating system connections(1) SAP UI Landscape

For both SAP Business Client and SAP GUI for Windows 7.50, datarequired for system logon is defined based on the new SAP UI Landscapefiles. The administrator configuration file typically contains:

• Message server hosts and ports• Routers• Predefined SAP Fiori Launchpad connections• Predefined SAP Business Client connections• Predefined SAP GUI connections• Predefined search providers

For information on the migration of the previous connection configuration,see:• Help Portal: Migration of Configuration Data• SAP Note 2075150

The SAP UI Landscape administrator configuration file replaces former NWBC configuration settings forsystem connections and search providers in %ALLUSERSPROFILE%\SAP\NWBC\NwbcOptions.xml

2) System Connection

9PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

Creating system connections(2) New Connection Type: Fiori launchpad

With the new fiori launchpad connection SAP Business client acts as aWindows-based desktop browser for the SAP Fiori launchpad with theability to launch classic Dynpro applications (SAP GUI transactions):

• Protocol is either http:// or https://

• Syntax for the URL is as follows:http(s)://<server>.<domain>.<ext>:<port>/<path>

• Default path:/sap/bc/ui5_ui5/ui2/ushell/shells/abap/FioriLaunchpad.html

For information on the SAP Fiori Launchpad configuration, see:• Help Portal: Setting Up the Launchpad• Help Portal: Customize the Launchpad URL

2) System Connection

SAP Fiori launchpad

10PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

Distributing system connectionsProvision options for administrator configuration file

PullUI client retrieves administrator configuration file from a central storagesuch as a remote share or a Web service platform

PushAdministrator distributes the administrator configuration file from hiscentral data storage repository to the clients

NWBC, SAP GUI for Windows,SAP GUI for Java

%APPDATA%\SAP\Common\SAPUILandscape.xml

Read and Write:User configuration file

%ProgramData%/SAP/<filename>.xml

Retrieves datafromadministratorconfiguration file

Remote Share:\\<Server>\<...>\UILandscape.xml

Client initiates pull request.

Web Service Access

NWBC, SAP GUI for Windows,SAP GUI for Java

%APPDATA%\SAP\Common\SAPUILandscape.xmlCache and Read:

Administratorconfiguration file Read and Write:

User configuration file

2) Distributing Connection

More information:• Help Portal: Provision of Administrator Configuration File• SAP Front End Installation Guide, “Configuration with SAP NetWeaver Business Client”

11PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

Creating and distributing client configurationNwbcOptions.xml and registry entries 2) Client Configuration

Administrator configuration, such as user settings are located in the following folder:%ALLUSERSPROFILE%\SAP\NWBC• Predefine default values (changeable by end-users)• Prevent end-users from changing values• Prevent end-users from creating new entries• Control runtime behaviorProvisioning options:Push to clients (%ALLUSERSPROFILE%\SAP\NWBC\NwbcOptions.xml) or provide centrally,once defining the location in %ALLUSERSPROFILE%\SAP\NWBC\NwbcRemoteOptions.xmlFor more information, see• Comments in the configuration file template

%ALLUSERSPROFILE%\SAP\NWBC\NwbcOptions.xml.template• Help Portal: SAP Business Client Settings (NWBCOptions.xml)• Help Portal: Administrator Configuration Tips

SAP UI landscape options• Set registry entries – separately or together with installation via installation server• For more information about the installation server, see

SAP Front End Installation Guide, “Configuring Packages and Scripting Events”

3. Installing SAP Business Client andSAP GUI for Windows 7.50

13PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

Installing SAP Business Client1/2

We recommend to install SAP Business Client togetherwith SAP GUI for Windows 7.50.

You will find the installation on the 7.50 Compilation DVD(download via SAP Support Portal).

For more information, see:• Front-End Installation Guide, which is stored in the

Docu directory both on the CD and the SAPNetWeaver SAPSetup - SAPs Front-End SoftwareDeployment Tool guide (Workstation InstallationHelp.chm)

• Help Portal: Installing SAP Business Client with SAPGUI

2) Install

4. Creating and distributing Internet Explorersecurity options

15PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

Distributing Internet Explorer security options

Make sure server addresses corresponding to the system connectionsare covered by the Local intranet or the Trusted sites zone.For more information, see Help Portal: Security Zones in Internet Explorer

SAP Business Client renders HTML content using the Internet Explorer and thus uses the Internet Explorer zone model.The Internet Explorer zone model is also used for navigation to SAP GUI transactions.

4) Security

5. Configuring the AS ABAP back end

5.1 Configuring the AS ABAP back end:SAP Business Client core features1. Configure HTTP(S) communication, authentication, SSL and SNC on the AS ABAP

2. Activate the NWBC server runtime

3. Make system-specific settings (customizing, whitelist)

18PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

5.1.1 General server configurationProposal

Step 1: Enable HTTP(S) communication – configure ICMHelp Portal: Administration of the Internet Communication ManagerHelp Portal: HTTP(S) Settings in ICMTest: Call BSP or WDA application in browser

Step 2: Configure the AS ABAP to support SSL and SNCHelp Portal: SAP Cryptographic LibraryHelp Portal: Secure Connections

Step 3: Configure authenticationHelp Portal: Authentication and Single Sign-On with SAP Business Client

https://<SERVER>:<PORT>/sap/bc/echo

https://<SERVER>:<PORT>/sap/bc/bsp/sap/it00

5) Configure ABAP Back End

19PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

5.1.2 Activate the NWBC server runtime

Activate Business-Client specific ICF servicesHelp Portal: ICF ConfigurationHelp Portal: Active Services in ICF (UI Services)Test: Launch NWBC for HTML (Test the NWBC ICF service in

transaction SICF)

The server runtime is required for transfer of system and user data. The following two server runtimes are available:

• Server runtime for SAP NetWeaver user interface services as of SAP User Interface Add-On 1.0 SPS 04 for SAP NetWeaver and SAP NetWeaver 7.4 SPS 03• Server runtime for SAP Business Client

SAP recommends the use of the server runtime for SAP NetWeaver UI servicesfor the following reasons:• New UI services features can be applied to SAP Business Client• New UIs and latest developments based on SAPUI5 and SAP NetWeaver Gateway

can be used with NWBC• SAP NetWeaver UI services can be supported by the provision of small-sized

support packages• New UI features are shipped with support packages within a few months

5) Configure ABAP Back End

20PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

5.1.3 Make system-specific settings(customizing, and whitelist) 5) Configure ABAP Back End

This is already fine-tuning…

In NWBC customizing, the administrator can for example

• Define a welcome message for the Index page• Specify a themeFor more information, see• Help Portal: Definition of Configuration Parameters in Customizing (server runtime for NW UI services)• Help Portal: Definition of Configuration Parameters with Table NWBC_CFG (server runtime for NWBC)

A whitelist can be defined on top of the Internet Explorer security zone model.For more information, see:• Help Portal: Whitelist• Help Portal: Defining a Whitelist in HTTP_WHITELIST• Help Portal: Security Zones in Internet Explorer

Recommended

5.2 Configuring the AS ABAP back end:Activating the side panel1. Activate the side panel business function

2. Assign side panel roles to users

3. Enable data transfer to side panels

4. Activate SAP GUI scripting

22PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

5.2.1 System settings:Activate side panel business function 1/2

Open the Easy Access Menu and navigate to:

> Tools> ABAP Workbench

> Development> Switch Framework> Business Function

Alternatively, call transaction SFW2.

5) Configure ABAP Back End

23PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

Enter business function ERP_CA_SIDEPANELand choose “Activate”

The business function documentation is availablein the SAP Help Portal:

Deutsch / English

5.2.1 System settings:Activate side panel business function 2/2

5) Configure ABAP Back End

24PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

5.2.2 System settings:Assign side panel roles to users 1/3

As of ECC 6.0 SP07, a new generic sidepanel role is available:SAP_BSSP_SIDEPANEL_ALL

To enable the side panels for the users, youmust assign the side panel roles in UserMaintenance (SU01).

5) Configure ABAP Back End

25PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

5.2.2 System settings:Assign side panel roles to users 2/3

Alternatively, assign the user to the role inRole Maintenance (PFCG)

For more information, see the SAP Help Portal:

Deutsch / English

5) Configure ABAP Back End

26PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

5.2.2 System settings:Assign side panel roles to users 3/3

If the SP status is ECC 6.0 SP06 or below,specific roles need to be assigned

For more information, see the SAP Help Portal:

Deutsch → Sidepanel einrichten

English → Setting Up the Side Panel

5) Configure ABAP Back End

27PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

5.2.3 System settings:Enable format conversion for data transfer from canvas to side panels 5) Configure ABAP Back End

Execute HTTP Service HierarchyMaintenance (Transaction SICF)

> Enter Hierarchy Type SERVICE

> Enter Service Path /sap/bc/ui2/nwbc/(server runtime for NW UI services)

> Execute

Ensure that the SICF service nwbc_ext2intresponsible for data format conversion isactive

28PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

5.2.4 System settings:Enable global data transfer to side panels 1/2

1. In Object Navigator (transaction SE80),select Web Dynpro Comp./Intf.WD_GLOBAL_PARAMETERS.

2. Navigate to Web Dynpro applicationWD_GLOBAL_SETTING. Set the focus tothe object and choose Test/Execute (F8).

A browser window opens.

1

2

5) Configure ABAP Back End

29PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

5.2.4 System Settings:Enable global data transfer to side panels 2/2

3. Go to change mode and open section“Side-Panel”.

4. Activate the 2 Web Dynpro parametersWDSIDEPANELREMOTECONSUMERandWDSIDEPANELREMOTEPRODUCER.

5. Save changes.

5) Configure ABAP Back End

3

4

30PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

5.2.5 Activate SAP GUI scripting – approach 1

1. Start the Profile Parameter Maintenance(transaction RZ11).

2. Enter parameter sapgui/nwbc_scripting, andchoose Display.Attention: parameter name is case sensitive!

3. Choose Change Value.

4. Set the value to TRUE and save changes.

5) Configure ABAP Back End

31PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

5.2.5 Activate SAP GUI scripting – alternative approach

1. Start the Profile Parameter Maintenance(transaction RZ11).

2. Enter parameter sapgui/user_scripting andchoose Display.Attention: parameter name is case sensitive!

3. Choose Change Value.

4. Set the value to TRUE and save changes.

5. Repeat for the parametersapgui/user_scripting_set_readonly and setthe value to TRUE.

5) Configure ABAP Back End

6. Defining user roles for SAP BusinessClient 6.5

33PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

Role-based navigation

General– Roles are used to define authorization settings as well

as the navigation structure used by the UI client– Roles match the real life roles that people play within a

work environment

SAP Business Client– The Business Client runtime retrieves all roles

assigned to a specific user and makes the navigationstructure available to the shell

– If the role doesn‘t provide a navigation structure,Business Client uses the SAP Menu

– For Web AS connections, maintain the navigation intransaction PFCG, tab Menu

– A set of attributes specifically dedicated to thenavigation frame presentation has been introduced toPFCG in the last releasesà Other Node Details and Menu Options

§ Help Portal: Role Maintenance in PFCG

6) Define Roles

34PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

Role-based navigation – merging of navigation trees

General– If a user has more than one role assigned, the entries in the navigation

tree appear merged as in one role– Two entries that are the same in two roles, appear only once– The role order depends on the sort index defined for the role– Help Portal: Merging of Navigation Trees

Rules– If roles contain identical folders in equal hierarchies, their folder

contents are merged and redundant folders are not visible– Identical folder means that the following attributes are identical:▫ Name of the entry (object field)▫ Level of the entry in the tree▫ Type of the entry (standard entry, side panel or link collection)▫ Referenced entry (for side panel and link collection)

– The entries of the merged folder are sorted according to the sort index,ie. entries from the role with the lower sort index come first

6) Define Roles

35PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

Role-based navigation: sort index

ZAP_NWBC_HOMESort index 0 (home role)

ZAP_NWBC_USER_POWERSort index 100

ZAP_NWBC_USER_STANDARDSort index 10

SAP BC 6.0

SAP BC 6.5

6) Define Roles

MOREINFORMATION

37PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

Documentation

For detailed documentation of the NetweaverBusiness Client please refer to the SAP Help PortalLatest documentation regarding Business Client 6.5see on SAP Business Client Community

SAP Note 2201009 contains details about the patchesfor SAP Business Client

38PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

SAP Business Client Administration Guide (Excerpt 1)

Installation and Client ConfigurationSAP Business Client for Desktop Installationo Installing SAP Business Cliento Windows Terminal Server InstallationAdministrator Configuration

Connection Configurationo SAP UI Landscapeo Migration of Configuration Datao Provision of Administrator Configuration File

SAP Business Client SettingsAdministrator Configuration TipsConfiguring Support InformationUsing SAP Business Client with a Load Balancer

Server ConfigurationServer Runtime for SAP NetWeaver User Interface Serviceso Migrating to the Server Runtime for UI Serviceso Configuring the Server Runtime for UI Services for SAP

Business Cliento HTTP(S) Settings in ICMo Active Services in ICF (UI Services)o Settings for Fully Qualified Domain Nameso Configuring Authentication on the Servero Cockpitso Definition of Configuration Parameters in Customizingo Definition of Configuration Parameters with Table NWBC_CFG

39PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

SAP Business Client Administration Guide (Excerpt 2)

Role Maintenance in PFCGo PFCG Overviewo Navigation Treeo Default Pages and Service Mapso Menuo Search Providerso Side Panelo Remote Systemso Object-Based Navigationo Merging of Navigation Trees

Programming AspectsGenerating an External Startup URL for NWBCIntegrating the Context-Sensitive Side Panel

Security AspectsAuthentication and Single Sign-On with SAP Business Cliento ICF Configurationo Security Zones in Internet ExplorerWhite Listo Enabling Single Sign-On with Secure Login Client for SAP

Business Client

40PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

Information on public web

LATEST SAP BC DOWNLOAD

SAP BC COMMUNITY

SAP UI ROADMAP

ENTERPRISE ARCHITECT EXPLORER

SAP LIBRARY DOCUMENTATION

PRODUCT PAGE

No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of SAP SE or an SAP affiliate company.

The information contained herein may be changed without prior notice. Some software products marketed by SAP SE and its distributors contain proprietary software componentsof other software vendors. National product specifications may vary.

These materials are provided by SAP SE or an SAP affiliate company for informational purposes only, without representation or warranty of any kind, and SAP or its affiliatedcompanies shall not be liable for errors or omissions with respect to the materials. The only warranties for SAP or SAP affiliate company products and services are those that areset forth in the express warranty statements accompanying such products and services, if any. Nothing herein should be construed as constituting an additional warranty.

In particular, SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or any related presentation, or to develop or releaseany functionality mentioned therein. This document, or any related presentation, and SAP SE’s or its affiliated companies’ strategy and possible future developments, products,and/or platform directions and functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason without notice. Theinformation in this document is not a commitment, promise, or legal obligation to deliver any material, code, or functionality. All forward-looking statements are subject to variousrisks and uncertainties that could cause actual results to differ materially from expectations. Readers are cautioned not to place undue reliance on these forward-looking statements,and they should not be relied upon in making purchasing decisions.

SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of SAP SE (or an SAP affiliate company)in Germany and other countries. All other product and service names mentioned are the trademarks of their respective companies.See http://global.sap.com/corporate-en/legal/copyright/index.epx for additional trademark information and notices.

© 2017 SAP SE or an SAP affiliate company. All rights reserved.

43PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

COMMON CONFIGURATION

PrerequisitesSAP Business Client 5.0 and higherSAP GUI for Windows 7.40 and higherSAP GUI for Java 7.40 and higher

Mandatory for SAP BC, optional for SAP GUI(default with SAP GUI for Windows 7.50)

Configuration based on XML filesAutomatic merge of existing .ini files duringinstallation of SAP Business Client with SAP GUI

SAPUILandscapeGlobal.xml for message server andSAP router informationSAPUILandscape.xml for SAP logon entries

No need to have sapmsXXX ports maintained in/etc/services

Unified SAP UI landscape

SAP UI LANDSCAPE

ADMINCONFIG

USERCONFIG

COMMONCONFIGURATION

MOREINFORMATION

45PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

Information on public web

LATEST SAP BC DOWNLOAD

SAP BC COMMUNITY

SAP UI ROADMAP

ENTERPRISE ARCHITECT EXPLORER

SAP LIBRARY DOCUMENTATION

PRODUCT PAGE

46PUBLIC© 2017 SAP SE or an SAP affiliate company. All rights reserved. ǀ

Related SAP notes

2446515 SAP Business Client 6.5: Prerequisites and restrictions2455699 SAP Business Client 6.5: Expected releases

2227396 SAP Business Client 6.0: Prerequisites and restrictions2201009 SAP Business Client 6.0: Patches - client only2227431 SAP Business Client 6.0: Expected releases

Thank you.Contact information:

SAP Business Client Product Management

No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of SAP SE or an SAP affiliate company.

The information contained herein may be changed without prior notice. Some software products marketed by SAP SE and its distributors contain proprietary software componentsof other software vendors. National product specifications may vary.

These materials are provided by SAP SE or an SAP affiliate company for informational purposes only, without representation or warranty of any kind, and SAP or its affiliatedcompanies shall not be liable for errors or omissions with respect to the materials. The only warranties for SAP or SAP affiliate company products and services are those that areset forth in the express warranty statements accompanying such products and services, if any. Nothing herein should be construed as constituting an additional warranty.

In particular, SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or any related presentation, or to develop or releaseany functionality mentioned therein. This document, or any related presentation, and SAP SE’s or its affiliated companies’ strategy and possible future developments, products,and/or platform directions and functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason without notice. Theinformation in this document is not a commitment, promise, or legal obligation to deliver any material, code, or functionality. All forward-looking statements are subject to variousrisks and uncertainties that could cause actual results to differ materially from expectations. Readers are cautioned not to place undue reliance on these forward-looking statements,and they should not be relied upon in making purchasing decisions.

SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of SAP SE (or an SAP affiliate company)in Germany and other countries. All other product and service names mentioned are the trademarks of their respective companies.See http://global.sap.com/corporate-en/legal/copyright/index.epx for additional trademark information and notices.

© 2017 SAP SE or an SAP affiliate company. All rights reserved.