EC ABAP RFC to BW, CE, CRM

Question

I would like to know if there are different techniques to securing the SM9 connecton between tow ABAP rather than using user account/ password.
I would rather not enter any use ID or passwrd to minimize.
Can I used X.509 certs, etc etc.
What is best practice for using configuring SAP uinterconnectivy thiough SM59 without pas
Jex Wildfire

Answer 1

In addition to the SNC protection, you can also create trusted RFC conenctions between the partners. This also works without SNC though, but as Tim stated it is better to encrypt the trust than compress and encode it.
This gives you the option to define the connection as being the current user  - so their own access rights and even existence will determine what they can do via the connection.
This works very well for "normal" users, but you must have their authorizations user control and understand the concept behind it (for example that you can use the same technical connection for various scenarios without the authorizations of the SYSTEM user in the connection accumulating to the sum of all of them).
Additionally, authorizations in the target system are at the same time authentication for the "caller" user and system and transaction context. You need to be very carefull of the calling users's ability to influence this context of the call.
Cheers,
Julius