{"id":164728,"date":"2026-06-29T13:57:57","date_gmt":"2026-06-29T11:57:57","guid":{"rendered":"https:\/\/e3mag.com\/?p=164728"},"modified":"2026-06-29T13:57:58","modified_gmt":"2026-06-29T11:57:58","slug":"use-of-sap-interfaces-prohibited","status":"publish","type":"post","link":"https:\/\/e3mag.com\/en\/sap-schnittstellen-nutzung-verboten\/","title":{"rendered":"SAP Interfaces: Use Prohibited"},"content":{"rendered":"

I want to take the time to look into the update to SAP Note 3255746\u2014\u201eUnpermitted usage of ODP Data Replication APIs\u201c\u2014dated April 13, 2026.\u00a0<\/p>\n\n\n\n

SAP Note 3255746<\/h2>\n\n\n\n

Looking back, we can see the milestones through which SAP Note 3255746 has evolved to its current state: The first version of SAP Note 3255746 was published on October 17, 2022. Among other things, it stated: SAP does not support the use of RFC function modules from the ODP data replication API in customer or third-party applications. These function modules are intended solely for internal SAP applications. Since they are neither released nor documented, SAP may change them at any time without prior notice. Customer or partner applications that use these function modules do not comply with SAP\u2019s recommendations for a sustainable and business-critical architecture. Any issues that arise from or are caused by such applications are the customer\u2019s responsibility, and SAP does not provide support for solutions to these issues. As a solution, SAP essentially referred to the help article \u201eODP-Based Data Extraction via OData\u201c in October 2022.<\/p>

\"\"<\/a><\/div>\n\n\n\n

On February 2, 2024, SAP then significantly revised the text. The note, in its V4 version at the time, read as follows: SAP does not permit the use of RFC modules from the Operational Data Provisioning (ODP) data replication API by customer or third-party applications to access SAP ABAP sources (on-premises or Cloud Private Edition). These modules are intended solely for SAP\u2019s internal applications and may be modified by SAP at any time without prior notice. The proposed solution remained unchanged in this update. On April 13, 2026, version 10 was released, which was later slightly modified on April 21. Here, SAP announces that on Patch Day, June 9, 2026, it will technically block the unauthorized use of the interfaces. The block is justified on the grounds of significant security risks. The note now states the following as a solution: Customers can, as described in the documentation, explore alternatives for transferring data to third-party applications, including the SAP Business Data Cloud (BDC) or the ODP-OData API (ODP-based data extraction via OData). Since the editorial deadline for the publication of this article in July 2026 was before June 9, 2026, I do not wish to speculate further here on how the announced security patches have affected the data exports of individual SAP customers.<\/p>\n\n\n\n

Relevance for the executive level?<\/h2>\n\n\n\n

What is certain, however, is that the use of the ODP-RFC API by customer and third-party applications\u2014which has been declared \u201eprohibited\u201c since February 2024\u2014has become widespread among SAP customers around the globe. In some cases, regulatory reports depend on the prohibited export of SAP data via this interface. Financial and governance processes\u2014including earnings reports for publicly traded companies\u2014are also potentially affected by the block.<\/p>\n\n\n\n

This means that the announcement of a technical block on the interface for unauthorized applications\u2014enforced via a security patch\u2014is not a technical issue for the IT department. It has direct relevance for executive boards and supervisory boards, which are responsible for ensuring the company\u2019s proper reporting. In the end, it\u2019s like concrete: it all depends on what you do with it.<\/p>\n\n\n\n

The solutions proposed by SAP deserve due recognition. But in my experience, SAP solutions are never black and white, and I don\u2019t know of any customer who licenses the Business Data Cloud for all of their SAP data, for example. On the other hand, I do know several customers for whom the achievable data throughput when using the ODP-ODATA API is far from sufficient.<\/p>\n\n\n\n

Conclusion: It's all about the mix<\/h2>\n\n\n\n

My recommendation to SAP customers is\u2014and this has become even more apparent since the announcements at Sapphire in Orlando and Madrid\u2014that the path forward will not work for SAP customers without BDC. However, SAP customers will not be able to\u2014or will not want to\u2014afford BDC for all their SAP data. In particular, it seems to me that using BDC purely as a tool for exporting SAP data to other systems is a waste of resources. For those who want to use such SAP data outside the SAP stack\u2014where BDC is not yet in use and is not intended to be used\u2014there is a solid and cost-effective solution available that does not compromise the \u201cclean core\u201d principle. (Source: Mehr.Sale) <\/p>","protected":false},"excerpt":{"rendered":"

The buzz surrounding SAP\u2019s April 2026 API policy has died down. Customers and partners are increasingly coming to terms with the announcements regarding the Autonomous Enterprise, the SAP Autonomous Suite, and the Cleanfield Approach, and are gradually gaining a clearer understanding.<\/p>","protected":false},"author":5845,"featured_media":164731,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"pmpro_default_level":"","footnotes":""},"categories":[44495,161],"tags":[44502,73,5967,44503,236],"coauthors":[44504],"class_list":["post-164728","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-mag-26-07","category-szene","tag-44502","tag-erp","tag-odata","tag-odp","tag-sap","pmpro-has-access"],"acf":[],"featured_image_urls_v2":{"full":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/06\/2607_sz_mehr_sale.jpg",1000,450,false],"thumbnail":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/06\/2607_sz_mehr_sale-150x150.jpg",150,150,true],"medium":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/06\/2607_sz_mehr_sale-400x180.jpg",400,180,true],"medium_large":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/06\/2607_sz_mehr_sale-768x346.jpg",768,346,true],"large":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/06\/2607_sz_mehr_sale.jpg",1000,450,false],"image-100":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/06\/2607_sz_mehr_sale-100x45.jpg",100,45,true],"image-480":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/06\/2607_sz_mehr_sale-480x216.jpg",480,216,true],"image-640":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/06\/2607_sz_mehr_sale-640x288.jpg",640,288,true],"image-720":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/06\/2607_sz_mehr_sale-720x324.jpg",720,324,true],"image-960":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/06\/2607_sz_mehr_sale-960x432.jpg",960,432,true],"image-1168":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/06\/2607_sz_mehr_sale.jpg",1000,450,false],"image-1440":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/06\/2607_sz_mehr_sale.jpg",1000,450,false],"image-1920":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/06\/2607_sz_mehr_sale.jpg",1000,450,false],"1536x1536":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/06\/2607_sz_mehr_sale.jpg",1000,450,false],"2048x2048":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/06\/2607_sz_mehr_sale.jpg",1000,450,false],"trp-custom-language-flag":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/06\/2607_sz_mehr_sale-18x8.jpg",18,8,true],"bricks_large_16x9":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/06\/2607_sz_mehr_sale.jpg",1000,450,false],"bricks_large":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/06\/2607_sz_mehr_sale.jpg",1000,450,false],"bricks_large_square":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/06\/2607_sz_mehr_sale.jpg",1000,450,false],"bricks_medium":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/06\/2607_sz_mehr_sale-600x270.jpg",600,270,true],"bricks_medium_square":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/06\/2607_sz_mehr_sale-600x450.jpg",600,450,true],"profile_24":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/06\/2607_sz_mehr_sale-24x24.jpg",24,24,true],"profile_48":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/06\/2607_sz_mehr_sale-48x48.jpg",48,48,true],"profile_96":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/06\/2607_sz_mehr_sale-96x96.jpg",96,96,true],"profile_150":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/06\/2607_sz_mehr_sale-150x150.jpg",150,150,true],"profile_300":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/06\/2607_sz_mehr_sale-300x300.jpg",300,300,true]},"post_excerpt_stackable_v2":"

Die Aufregung um SAPs API-Policy vom April 2026 hat sich gelegt. Kunden und Partner ordnen die Ank\u00fcndigungen zum Autonomous Enterprise, zur SAP Autonomous Suite sowie zum Cleanfield Approach zunehmend ein und gewinnen Schritt f\u00fcr Schritt ein klareres Verst\u00e4ndnis.<\/p>\n","category_list_v2":"MAG 26-07<\/a>, Szene<\/a>","author_info_v2":{"name":"Bernhard Friess, Mehr.Sale","url":"https:\/\/e3mag.com\/en\/author\/bernhard-friess\/"},"comments_num_v2":"0 comments","_links":{"self":[{"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/posts\/164728","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/users\/5845"}],"replies":[{"embeddable":true,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/comments?post=164728"}],"version-history":[{"count":1,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/posts\/164728\/revisions"}],"predecessor-version":[{"id":164730,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/posts\/164728\/revisions\/164730"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/media\/164731"}],"wp:attachment":[{"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/media?parent=164728"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/categories?post=164728"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/tags?post=164728"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/coauthors?post=164728"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}