Encrypting Passwords in JSON Payloads for SAP BO Agent.

Products

• CA Automic Workload Automation - Automation Engine
• Automic Automation
• Automic SaaS

Issue/Introduction

 

• Users configuring integrated SAP Business Objects (BOBI) jobs require a method to hide or encrypt passwords used within JSON payloads.

• The product documentation mentions that the agent supports encrypted passwords in JSON, prompting users to attempt hiding passwords using the Automic UCYBCRYP program.

• Passwords left in plain text within the JSON payload are visible to anyone viewing the job definition or job log, creating a security risk.

 

Environment

 

• Automic Automation - Automation Engine.

• SAP Business Objects (BOBI) integration agent.

 

Cause

 

• The documentation's reference to an "encrypted password in JSON" specifically pertains to the connection object password securely stored in the Automic CONN object.

• This reference does not mean users can embed UCYBCRYP manually encrypted passwords inside the raw JSON text.

• Earlier iterations of the solution lacked native support for encrypting or decrypting JSON payloads directly.

 

Resolution

 

• An enhancement (tracked as User Story DE208054) introduces dedicated support on the job panel to capture password field inputs securely.

• When a password field is required in the JSON, replace the actual password text with the keyword PLACEHOLDER.

• Once the placeholder is set, appropriately enter the real password into the corresponding FT, SFTP, or FileSystem password fields located below on the job panel.

• To utilize this feature, customers must deploy the updated SAP BOBI agent - TBA containing the backend changes.

• Product documentation is being updated to explicitly clarify how the connection object passwords interact with the JSON payloads.

 

Additional Information

 As this documentation relates to an enhancement (RFE), we recommend to subscribe to this article to receive updates regarding this integration functionality.