Resolution:
No, as of now, the SAP adapter does not support ‘Principal Propagation' functionality.

Principal propagation means the ability to forward the user context of a message unchanged from the sender to the receiver. It enables authentication of a message in the receiver system with the same user that issued the message in the corresponding sender system. Thus, the receiver application is virtually part of the sender application, and the permissions and audit functions of the receiver application can be applied to the original user of the sender application.

Please refer to http://help.sap.com/saphelp_nw2004s/helpdata/EN/45/0f16bef65c7249e10000000a155369/content.htm for further information.

We understand that as per principle propagation, when a sender system sends a message to the RFC adapter, it must use a type-T destination with the option “use SAP Logon ticket” switched on. The Adapter must be configured to accept SAP Logon tickets and the user of the sender application would be impersonated.

Engineering suspects that in this case the password sent by the sender system is encrypted thus the adapter might need to decrypt the password before forwarding the request to SAP. The present architecture of the adapter does not support this functionality.

Also, this configuration requires the RFC Destination connection type to be set as ABAP which is not supported by the adapter.

Does the TIBCO ActiveMatrix Adapter (TM) for SAP support 'Principal Propagation' functionality?