--- title: Outbound Authentication with SAP Cloud Integration description: Learn to set up outbound authentication with SAP Cloud Integration by looking at six authentication options that cover a variety of receiver adapter types. image: https://blog.sap-press.com/hubfs/canva-photo-editor%20-%202021-04-30T093654.634.png --- [![rheinwerk-sappress-logo-header-1](https://blog.sap-press.com/hubfs/rheinwerk-sappress-logo-header-1.svg)](https://blog.sap-press.com/) [Blog](https://blog.sap-press.com) - Books - Get an overview of our books and courses on every relevant SAP topic. - [Programming](https://sap-press.com/programming/) - [Administration](https://sap-press.com/administration/) - [BI](https://sap-press.com/business-intelligence/) - [Finance](https://sap-press.com/finance-controlling/) - [Logistics](https://sap-press.com/logistics/) - [HR](https://sap-press.com/human-resources/) - [CRM & Sales](https://sap-press.com/marketing-sales/) - [HANA](https://sap-press.com/hana/) - [Introductions](https://sap-press.com/introductions/) - [E-Bites](https://sap-press.com/e-bites/) - [Certification Guides](https://www.sap-press.com/certification-guides/) - [Rheinwerk Courses](https://www.sap-press.com/online-courses/) - Book Subscription - Get unlimited access to all SAP PRESS books! - [SAP PRESS Subscription](https://sap-press.com/subscriptions/) [Programming](https://blog.sap-press.com/tag/programming) # Outbound Authentication with SAP Cloud Integration ![SAP PRESS](https://blog.sap-press.com/hubfs/Twitter_profile_pic.svg) by [SAP PRESS](https://blog.sap-press.com/author/sap-press) When we talk about outbound communication where Cloud Integration acts as client, we must mention that Cloud Integration doesn’t offer any choices about how the user associated with the outbound request should be authorized to execute certain actions in the receiver system.   Therefore, as integration developer, you can’t specify any authorization options. This situation is plausible for the following reason: How the permissions of a calling entity are checked can only be defined by the technical capabilities of the server (in the outbound communication case, the receiver system). Because Cloud Integration (as a client in this case) can’t decide which technical capabilities are offered by the receiver system, SAP Cloud Integration cannot allow you to specify any authorization options in a receiver adapter.   However, in a receiver adapter, you can specify the **Authentication** option supported by the client (Cloud Integration, in this case). You can easily verify this fact by creating a receiver channel that supports HTTP communication (e.g., a receiver HTTP adapter), as shown below.   ![Authentication Options Offered for Receiver Adapters That Support HTTPS](https://blog.sap-press.com/hs-fs/hubfs/1964_11_035.png?width=837&name=1964_11_035.png)   Specifying an **Authentication** option makes sense because SAP Cloud Integration can provide the required artifacts for each authentication option.   The sections below summarize the different authentication options available and provides information on the related integration artifacts to considering when configuring each communication option. ## Basic Cloud Integration is authenticated against a receiver system based on user credentials (user name and password).   When you configure basic authentication for outbound communication, you need to complement the related receiver adapter setting by defining a security artifact that contains the credentials (a **User Credentials** artifact).   This option is supported by the following receiver adapter types: AS2, AS4, [OData](https://blog.sap-press.com/introduction-to-odata-in-sap) V2, OData V4, HTTP, IDoc, ODC, SOAP SAP RM, SOAP 1.X, [SuccessFactors](https://learning.sap-press.com/sap-successfactors) OData V2, XI.   ## Client Certificate Cloud Integration is authenticated against a receiver system based on a client certificate.   A client certificate (including public and private key) and a receiver server root certificate, which is accepted by the receiver, need to be part of the **Keystore** deployed on the tenant. In the receiver adapter settings of the integration low, the private key alias of the certificate can be modified to indicate a specific key pair must be used for this step. If you don’t specify a private key alias, any appropriate key in the keystore is used.   This option is supported by the following receiver adapter types: [Ariba](https://learning.sap-press.com/sap-and-the-cloud#sap-ariba), AS2, AS4, OData V2, HTTP, IDoc, SOAP SAP RM, SOAP 1x, XI.   ## Principal Propagation Cloud Integration is authenticated against a receiver system by forwarding the identity (principal) of the user (associated with the inbound request) to the SAP Cloud Connectivity service and from there to the receiver system (which can be, e.g., an on-premise SAP system).   Consequently, this option can only be selected when you’ve chosen **On-Premise** for the **Proxy Type** option, meaning you’ve configured outbound connectivity to an on-premise system through the SAP Connectivity service.   Setting up a scenario with this authentication option requires comprehensive configuration steps at the inbound and outbound side of Cloud Integration, as well as in the SAP Connectivity service and the receiver back-end system.   This option is supported by the following receiver adapter types: OData V2, HTTP, IDoc, ODC, SOAP (1.x), XI.   ## OAuth (When Using Twitter or Facebook Adapter) Cloud Integration calls Twitter or Facebook using OAuth authentication mechanisms.   A **Secure Parameter** artifact is required to store the OAuth credentials.   This authentication option is supported by the Twitter and Facebook receiver adapter types. This option isn’t offered for the other HTTP-based adapters.   ## OAuth2 SAML Bearer Assertion (OAuth2 Client Credentials) Cloud Integration is authenticated against a receiver system based on an access token received through an OAuth workflow.   Certain receiver adapters also offer the following OAuth variants: **OAuth2 SAML Bearer Assertion** and **OAuth2 Client Credentials**. To set up a scenario with such an authentication option, you also need to deploy an **OAuth2 Credentials** artifact to further specify the details for the OAuth outbound authentication (e.g., the address of the authentication server) in the **Monitor** section of the Web UI under **Manage Security (Security Material** tile).   The following receiver adaptor types support the option **OAuth2 Client Credentials**: AMQP/WebSocket, OData V2, OData V4, HTTP.   The following receiver adapter types support the option **OAuth2 SAML Bearer Assertion**: OData V2, HTTP, SAP SuccessFactors OData V2.   ## None If this option is selected, no authentication is required for the tenant when calling a receiver system.   Note that, to have the permission to deploy security-related artifacts, your user must have been assigned the required roles, for example, the authorization group Auth-Group.Administrator.   Proxy Type: The following adapter settings are relevant in the context of configuring the Authentication setting Principal Propagation.   In most HTTP-based adapters (e.g., the SOAP and IDoc adapters), you’ll find the attribute Proxy Type. In the scenarios we cover in this book, we always kept the default setting of this attribute (Internet), which ensures that the tenant can connect to another system through the internet (e.g., over HTTP).   The other option for the Proxy Type attribute is On-Premise. Using this option, the tenant can connect to an on-premise system through SAP Connectivity services. When setting up such a scenario, you’ll also need to install an additional component, The SAP Connectivity services, referred to as the cloud connector, in your on-premise landscape, that acts as proxy for requests that try to access your on-premise system coming from the internet. If you use multiple cloud connector instances in your system landscape, you’ll also need to specify a Location ID. With this attribute, you can identify the cloud connector instance you want to use for your connection.   [Learn more about SAP and the cloud here](https://learning.sap-press.com/sap-and-the-cloud).   ## Learn SAP Integration Suite with Rheinwerk Courses! Ready to level up your SAP Integration Suite skills? Explore our full range of SAP Integration Suite online courses, from foundational iFlow design and API management to SAP Process Orchestration migration and integration test automation. Each one is instructor-led (live and on-demand), includes recordings and slide decks, and is designed to give you practical take-away skills you can apply right away in your SAP landscape. Click on the banner below to get started!   [![SAP Integration Suite Courses](https://blog.sap-press.com/hs-fs/hubfs/blog_courses_integration_suite_series.png?width=597&height=199&name=blog_courses_integration_suite_series.png)](https://www.sap-press.com/online-courses/topics/programming)   *Editor’s note*: This post has been adapted from a section of the book [Cloud Integration with SAP Integration Suite The Comprehensive Guide](https://www.sap-press.com/cloud-integration-with-sap-integration-suite_5760/?utm_source=sappressblog&utm_medium=referral&utm_campaign=Blogs&utm_term=2471_chapter11&utm_content=2471)by John Mutumba Bilay, Shashank Singh, Swati Singh, Peter Gutsche, and Mandy Krimmel. ## Recommendation [![Cloud Integration with SAP Integration Suite](https://blog.sap-press.com/hs-fs/hubfs/social-suggested-images/2471-1-Jun-24-2024-03-04-24-9908-PM.jpg?width=170&name=2471-1-Jun-24-2024-03-04-24-9908-PM.jpg)](https://www.sap-press.com/cloud-integration-with-sap-integration-suite_5760/?utm_source=sappressblog&utm_medium=referral&utm_campaign=Blogs&utm_term=2471_chapter11&utm_content=2471) **Cloud Integration with SAP Integration Suite** Bring your cloud and on-premise applications together with Cloud Integration (formerly SAP Cloud Platform Integration) in SAP Integration Suite! Integrate processes and data in your system, step by step, by developing and configuring integration flows in the SAP BTP, Cloud Foundry environment. Enhance your integrations with APIs, open connectors, and custom adapters. Explore prepackaged content in the content catalog, debug and secure integration projects, connect to third-party systems, and more! [Learn More](https://www.sap-press.com/cloud-integration-with-sap-integration-suite_5760/?utm_source=sappressblog&utm_medium=referral&utm_campaign=Blogs&utm_term=2471_chapter11&utm_content=2471) ![SAP PRESS](https://blog.sap-press.com/hubfs/Twitter_profile_pic.svg) **by [SAP PRESS](https://blog.sap-press.com/author/sap-press)** SAP PRESS is the world's leading SAP publisher, with books on ABAP, SAP S/4HANA, SAP IBP, intelligent technologies, SAP Business Technology Platform, and more! [Programming](https://blog.sap-press.com/tag/programming) [Administration](https://blog.sap-press.com/tag/administration) [![Share on facebook](https://7528309.fs1.hubspotusercontent-na1.net/hub/7528309/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/facebook-color.png?width=24&name=facebook-color.png)](https://www.facebook.com/share.php?u=https%3A%2F%2Fblog.sap-press.com%2Foutbound-authentication-with-sap-cloud-integration%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://7528302.fs1.hubspotusercontent-na1.net/hub/7528302/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/linkedin-color.png?width=24&name=linkedin-color.png)](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fblog.sap-press.com%2Foutbound-authentication-with-sap-cloud-integration%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://7528304.fs1.hubspotusercontent-na1.net/hub/7528304/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/twitter-color.png?width=24&name=twitter-color.png)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fblog.sap-press.com%2Foutbound-authentication-with-sap-cloud-integration%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fblog.sap-press.com%2Foutbound-authentication-with-sap-cloud-integration%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://7528311.fs1.hubspotusercontent-na1.net/hub/7528311/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/email-color.png?width=24&name=email-color.png)](mailto:?subject=Check+out+https%3A%2F%2Fblog.sap-press.com%2Foutbound-authentication-with-sap-cloud-integration%3Futm_medium%3Dsocial%26utm_source%3Demail&body=Check+out+https%3A%2F%2Fblog.sap-press.com%2Foutbound-authentication-with-sap-cloud-integration%3Futm_medium%3Dsocial%26utm_source%3Demail) ### Comments ### Latest Blog Posts [![SAP BTP Security: Identity Providers Overview](https://blog.sap-press.com/hs-fs/hubfs/SAP%20BTP%20Security%20Identity%20Providers%20Overview.png?height=600&name=SAP%20BTP%20Security%20Identity%20Providers%20Overview.png)](https://blog.sap-press.com/sap-btp-security-identity-providers-overview) [Programming](https://blog.sap-press.com/tag/programming) ## [SAP BTP Security: Identity Providers Overview](https://blog.sap-press.com/sap-btp-security-identity-providers-overview) [Read More](https://blog.sap-press.com/sap-btp-security-identity-providers-overview) [![What a Service Key Is in SAP Integration Suite](https://blog.sap-press.com/hs-fs/hubfs/What%20a%20Service%20Key%20Is%20in%20SAP%20Integration%20Suite.jpg?height=600&name=What%20a%20Service%20Key%20Is%20in%20SAP%20Integration%20Suite.jpg)](https://blog.sap-press.com/what-a-service-key-is-in-sap-integration-suite) [Administration](https://blog.sap-press.com/tag/administration) ## [What a Service Key Is in SAP Integration Suite](https://blog.sap-press.com/what-a-service-key-is-in-sap-integration-suite) [Read More](https://blog.sap-press.com/what-a-service-key-is-in-sap-integration-suite) **Subscribe to our blog!**Get notified about future blog updates. - - - - - ### The official SAP PRESS Blog As the world’s leading SAP publisher, SAP PRESS’ goal is to create resources that will help you accelerate your SAP journey. The SAP PRESS Blog is designed to provide helpful, actionable information on a variety of SAP topics, from SAP ERP to SAP S/4HANA. Explore ABAP, FICO, SAP HANA, and more! ### SAP Blog Topics - [All Topics](https://blog.sap-press.com) - [Logistics](https://blog.sap-press.com/tag/logistics) - [Programming](https://blog.sap-press.com/tag/programming) - [FICO](https://blog.sap-press.com/tag/fico) - [Administration](https://blog.sap-press.com/tag/administration) - [Business Intelligence](https://blog.sap-press.com/tag/business-intelligence) - [What Is?](https://blog.sap-press.com/tag/what-is) - [Featured](https://blog.sap-press.com/tag/featured) - [CRM & Sales](https://blog.sap-press.com/tag/crm-sales) - [Video](https://blog.sap-press.com/tag/video) - [Human Resources](https://blog.sap-press.com/tag/human-resources) ### Blog curated by [![Rheinwerk Publishing & SAP PRESS Logo](https://blog.sap-press.com/hubfs/rheinwerk-sappress-logo-header-1.svg)](https://sap-press.com) [Visit the SAP PRESS Store](https://sap-press.com) ### About - [Home](https://sap-press.com/) - [About Us](https://sap-press.com/the-publisher/) - [Contact](mailto:info@rheinwerk-publishing.com) - [Legal Notes](https://sap-press.com/legal-notes/) - [Privacy Policy](https://sap-press.com/privacy/) - [Terms of Use](https://sap-press.com/terms/) - [Guest Posting](https://blog.sap-press.com/guest-posting) © 2026 Rheinwerk Publishing, Inc. | Change Privacy Options ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "SAP PRESS", "url" : "https://blog.sap-press.com/author/sap-press" }, "dateModified" : "2026-06-09T17:04:41.785Z", "datePublished" : "2021-05-03T13:00:00.000Z", "headline" : "Outbound Authentication with SAP Cloud Integration", "image" : [ "https://blog.sap-press.com/hubfs/canva-photo-editor%20-%202021-04-30T093654.634.png" ], "mainEntityOfPage" : { "@id" : "https://blog.sap-press.com/outbound-authentication-with-sap-cloud-integration", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.sap-press.com/hubfs/Logo-1.jpg" }, "name" : "Rheinwerk Publishing, Inc." } } ```