Set up a service user or app in SAP
- Pick the path with your Basis team: OData (S/4), RFC/BAPI (on‑prem ECC) or via PI/PO/CPI.
- Create a communication user (OAuth2 client for S/4 Cloud, basic auth for on‑prem) or a technical RFC user.
- Activate the services we need (e.g. API_PRODUCT_SRV, API_PURCHASEORDER_PROCESS_SRV, API_PROD_ORDER_CONFIRMATION) and transport if required.
- Open firewall/allowlist our IP range.
Sandbox first. Any new service exposure needs a transport.

