Lesson 2 of 6
Profiles and identifiers
10 min
Listen to this lesson
Every B2B scenario in TPM starts with two profiles: yours and your partner's. A profile is the place where everything about one party lives, from the contact person to the identifiers that appear in EDI envelopes. Get the profiles right and agreements become short; get them wrong and every agreement inherits the mistake.
The company profile
The company profile describes your own organization. You maintain it once per tenant, and you can add subsidiaries when different legal entities trade under their own identifiers. For Contoso, the company profile is Contoso Motor Co. If Contoso Parts Distribution LLC (company code 1810) later exchanges EDI under its own identifiers, it becomes a subsidiary in the same profile, and an agreement template can be created with the Create with Company Subsidiary option.
Trading partner profiles
A trading partner profile holds what you need to set up agreements with one partner: business context, contacts, systems, communication parameters, certificates, B2B standards, acknowledgments and the identifiers that recognize the partner in an incoming interchange and fill the envelopes of an outgoing one. In Integration Suite you choose Design > B2B Scenarios, open the Partner Profiles tab and choose Create > Trading Partner. The profile is organized in sections you complete in order:
- Overview: name, description and basic data.
- Contacts: the partner's EDI coordinator and escalation contact.
- Identifiers: the IDs that appear in envelopes, each with its type system and scheme.
- Business Context: the business processes and context the partner takes part in.
- Systems: the partner's systems, the type systems and versions they use, and their communication channels (for example the AS2 receiver configuration).
- Certificates: the partner's public certificates only.
- Parameters: custom values used by the scenario.
- Security: inbound security settings such as signature verification against the partner's AS2 ID.
- Number Ranges: number ranges used for control numbers in outgoing interchanges.
A communication partner profile is a separate kind of profile for AS2-specific configuration. Use it when messages travel through an intermediary such as an AS2 hub or value-added network that is not itself the business partner. An agreement template can include a communication partner with the Include Communication Partner option.
Identifiers: who is who in the envelope
An identifier tells the runtime which party a message belongs to. It is a group of fields:
| Field | What it means | Contoso example |
|---|---|---|
| Identification | The value that identifies the party within a scheme | CONTOSOMC |
| Type System | The B2B standard the identifier is used with, such as ASC X12, UN/EDIFACT, IDoc or SOAP | ASC X12 |
| Scheme Name and Scheme Code | The frame of reference that makes the value unique, such as a mutually defined ID or a DUNS-based scheme | Mutually defined (X12 qualifier ZZ) |
| Agency Name and Agency Code | The organization that issues identifiers in that scheme | The agency for the chosen scheme |
The scheme together with the type system becomes the identifier code qualifier. In X12 that is the ISA05/ISA07 qualifier next to the ISA06/ISA08 sender and receiver IDs; in EDIFACT it is the qualifier in the UNB sender and recipient. Contoso's identifier is CONTOSOMC with qualifier ZZ in ASC X12; Great Lakes Fleet Services' identifier is GLFLEETEDI, also ZZ. An inbound 850 from Great Lakes therefore carries GLFLEETEDI as interchange sender and CONTOSOMC as interchange receiver, and TPM uses that pair to find the agreement.
When the two parties use different standards, each side needs an identifier in the other side's encoding. SAP's documentation describes the fields Identifier as Trading Partner and Identifier as Company for this case. Suppose a European partner sends EDIFACT while Contoso's back end expects X12-style IDs: the company profile also needs an identifier in UN/EDIFACT encoding so the agreement can match messages from either side.
Certificates and keys: what goes where
AS2 security depends on key pairs, and TPM is strict about where each half lives. Only public certificates are uploaded in a profile's Certificates section. Private keys and user credentials stay in Cloud Integration's security material (Monitor > Manage Security), and the profile refers to them by alias. Contoso's company profile therefore names the private key alias used to decrypt inbound messages and sign MDNs; Great Lakes' profile holds Great Lakes' public certificate so Contoso can verify their signatures and encrypt messages to them.
Aliases, number ranges and transport
Profiles carry objects that must survive a transport from the test tenant to the production tenant. TPM lets you maintain an alias, a tenant-independent name, for identifiers, system instances and communication channels, so references stay intact across tenants. Number ranges provide interchange control numbers for outgoing interchanges and acknowledgments; Contoso keeps one per partner and per direction so a reset in one never collides with another.
- Company profileContoso Motor Co.: identifier CONTOSOMC (ZZ, ASC X12), private key alias for AS2, number ranges for outbound ISA13.
- Trading partner profileGreat Lakes Fleet Services: identifier GLFLEETEDI (ZZ, ASC X12), system with X12 004010, contact and escalation names.
- CertificatesGreat Lakes' public certificate uploaded; Contoso's public certificate sent to Great Lakes by Nadia's team.
- Systems and channelsAS2 receiver configuration for Great Lakes: URL, AS2 IDs GLFS-AS2 and CONTOSO-AS2, MDN request.
- SecuritySignature verification for messages sent under AS2 ID GLFS-AS2.
What would you do?
Kenji's developer has the Great Lakes private key file from the old PO keystore and asks to upload it to the Great Lakes trading partner profile "so everything is in one place". What is the right response?
- The company profile describes your organization and its subsidiaries; trading partner profiles describe each partner.
- Identifiers combine identification, type system, scheme and agency; the scheme plus type system gives the envelope qualifier.
- Profiles hold public certificates only; private keys and credentials stay in security material and are referenced by alias.
- Aliases keep references intact across tenants; number ranges supply outbound control numbers.
Check your understanding · not graded
Lesson check
1. Inbound 850s from Great Lakes carry ISA06 GLFLEETEDI and ISA08 CONTOSOMC with qualifier ZZ. Where do those values come from in TPM?
2. What may you upload in the Certificates section of a trading partner profile?
3. When would you create a communication partner profile?
4. Why does TPM let you maintain aliases for identifiers, system instances and communication channels?