Now accepting guest editorial from SAP, Oracle, Workday and ServiceNow practitioners.Pitch a guide
The Sign-Off Table

Lesson 6 of 6

Handover verification

9 min

Listen to this lesson

0:00 / 7:09

The last step of a refresh is the one testers care about: a handover that tells them the system is safe and ready. Without verification, the first tester to log on becomes the smoke test, and the first defect of the cycle is an environment problem. A short, standard checklist run by Basis and a key user, with results recorded, changes that.

SafetyNothing can reach real partners: email, RFC, IDoc, file and payment channels are test-only
Identity and settingsRight SID, license, client settings, system change option, transport configuration
BaselineTransports re-imported; system at the expected release state
FunctionKey business transactions and apps run end to end
AccessTest users and roles work; production-only users locked; data protection applied
What a handover check must cover, from safety to access.
The Sign-Off Table · thesignofftable.com/academy/sap-bas-204

A smoke checklist

CheckHowExpected result
Outbound emailTrigger a test output with email channel; check SAPconnectRedirected or blocked; nothing sent externally
RFC destinationsConnection tests in SM59 for each interface destinationAll point to test partners; none to production hosts
JobsSM37 for released jobsOnly jobs on the test plan are released, with test variants
Client and system settingsSCC4 for client 100 and 200; SE06Values match CMQ's standard, not production's
TransportsSTMS import history and queueCaptured CMQ-only transports re-imported with acceptable return codes
Data protectionSpot-check known customers and supplier bank detailsScrambled values; no real personal data
Business smoke testCreate a sales order for Great Lakes Fleet Services, deliver, bill; create a PO with Lakeside ComponentsDocuments created, outputs go to test devices
Front endsLog on with SAP GUI and the Fiori launchpad as a test userTiles and transactions available for the test roles

A post-refresh smoke checklist for CMQ. Extend it with your critical interfaces.

The refresh record's states: any failed safety check keeps CMQ closed until it is fixed and rechecked.
The Sign-Off Table · thesignofftable.com/academy/sap-bas-204
  1. Basis checksSam runs safety, identity, baseline and job checks
  2. Key user checksMaria runs the business smoke test in the launchpad
  3. RecordResults with screenshots or exports attached to the refresh record in SAP Cloud ALM
  4. DecideAll passed → hand over; any safety check failed → system stays closed
  5. AnnounceHandover message to testers: baseline, known limitations, start time
The handover sequence. A failed safety check always blocks handover.
The Sign-Off Table · thesignofftable.com/academy/sap-bas-204

Known limitations

Not every difference from production can or should be removed. Some interfaces have no test partner; some outputs go to a file instead of a printer; some jobs are deliberately not released. The handover message should list these known limitations plainly, so testers do not raise defects for them and test leads can see which scenarios cannot be fully proven in CMQ. Each limitation needs either an alternative test (for example, checking an interface file's content instead of its delivery) or an explicit note in the sign-off that the scenario was not covered.

When verification fails

If a check fails, fix it and rerun that check and any related ones; do not rerun only the step that was changed. A wrong RFC destination, for example, suggests the partner profile and port for the same partner may also be wrong. Record the failure and the fix in the refresh record: repeated failures of the same check point to a runbook step that needs improving.

A failed check is rarely alone: a wrong RFC destination means the same partner's IDoc port and partner profile need checking too.
The Sign-Off Table · thesignofftable.com/academy/sap-bas-204

What would you do?

During handover checks after a CMQ refresh, the SM59 test shows the destination to the bank interface still points to the production bank gateway. Everything else passed and testers are waiting. What should Sam do?

Key points
  • Verify before handing over: safety, identity and settings, baseline, function, access.
  • Any failed safety check keeps the system closed.
  • Record results and attach them to the refresh and the test cycle.
  • Automate mechanical checks; keep a key-user business smoke test.

Check your understanding · not graded

Lesson check

  1. 1. Which check category always blocks handover if it fails?

  2. 2. How do you verify RFC destinations after a refresh?

  3. 3. Who should run the business smoke test?

  4. 4. What should the handover record include?