This article explains how to install the Payhawk ABAP Extension into your SAP S/4HANA® Private Cloud system.
Because Private Cloud environments allow traditional ABAP transaction access, the installation uses abapGit, the industry-standard open-source Git client for ABAP, to pull code directly into your environment. This gives you a clean, traceable, and modern installation.
Prerequisites
Before you start the installation, make sure you have addressed the following requirements:
System access: developer access to your S/4HANA Private Cloud development system (client
000or your main configuration client, depending on your transport strategy).abapGit setup: the abapGit tool must be available in your system. It is typically run through a standalone report (for example,
ZABAPGIT_STANDALONE) or a custom transaction code (for example,/nZABAPGIT).Network and SSL configuration:
For the online method, your SAP system must have outbound internet access to the Git repository, and the appropriate SSL certificates must be uploaded in transaction
STRUST.If your system is completely firewalled, use the offline method (ZIP upload).
Extension details:
Target package:
ZPAYHAWK(or a sub-package as directed by Payhawk).Git repository URL or ZIP file: provided by Payhawk support.
Personal access token (PAT): provided by Payhawk support (for the online method).
Step-by-step installation guide
Step 1: Launch abapGit
Log in to SAP GUI for your S/4HANA Private Cloud development system.
Go to transaction
SE38, enter the name of your local abapGit program (usuallyZABAPGIT_STANDALONE), and press Execute (F8). Alternatively, if your basis team has mapped it, run transaction/nZABAPGIT.
Step 2: Establish the repository
Depending on your network infrastructure, choose Method A (online) or Method B (offline).
Method A: Online repository (recommended)
In the top menu of the abapGit dashboard, click New Online.
Enter the Git repository URL provided by Payhawk.
In the Target Package field, enter
ZPAYHAWK. If the package does not yet exist, click the option to create a new package, assign it to a valid transport layer, and save it.Click Create Online Repo.
Method B: Offline repository (for firewalled environments)
Download the Payhawk source extension
.zipfile provided by Payhawk to your local computer.In the top menu of the abapGit dashboard, click New Offline.
Provide a repository name (for example,
Payhawk_Extension) and enter the target packageZPAYHAWK.Click Create Offline Repo.
Once created, click Import ZIP from the repository options and upload the downloaded Payhawk
.zipfile.
Step 3: Maintain authentication (online only)
With the online option, abapGit prompts you for credentials when it communicates with the Payhawk remote repository.
When prompted by the system, enter the Git username provided to you.
Paste the fine-grained personal access token in the password/token field.
This token provides explicit read-only access to the Payhawk extension repository. Handle it with standard corporate credential safeguards.
Step 4: Review and pull the code objects
Once the repository link is created, abapGit displays a clear Diff matrix showing the incoming Payhawk objects (classes, tables, data elements, and so on) compared to your empty local package.
Click the Pull button on the repository action bar.
abapGit deserializes the Git files and instantiates the ABAP objects inside the
ZPAYHAWKpackage.Assign the incoming objects to a transport request when prompted, so they can be migrated through your landscape (Test, Quality, Production) later.
Step 5: Object activation
After the pull finishes, the objects must be activated within your NetWeaver stack.
abapGit typically triggers a mass activation automatically. If any objects remain inactive, open ABAP Development Tools (ADT) in Eclipse, or transaction
SE80.Locate the
ZPAYHAWKpackage.Right-click the package and select Activate. Ensure all components change state from
InactivetoActive.
Step 6: Transporting to QA and production (non-development systems)
Run the abapGit steps 1–5 only in your Development system. Quality Assurance (QA) and Production systems are set to Not Modifiable to enforce environment stability, so direct Git pulls are blocked there.
To safely deploy the Payhawk extension across your landscape, use the standard SAP Change and Transport System (CTS):
Release the transport: in your Development system, open the Transport Organizer (transaction
SE09orSE10). Locate the Workbench transport request created in Step 4, right-click the tasks, and release them, then release the main transport request container.Import to QA: log in to your Quality Assurance system. Use transaction
STMS(or your organization's deployment tool, such as SAP ChaRM) to find the released transport request in the import queue, then trigger the import.Import to production: perform your standard business and regression testing in the QA environment. Once approved, use
STMSto import the same transport request into your Production system.
This lifecycle keeps your business-critical environments secure, isolated from internet repositories, and structurally identical to what was verified during QA testing.
Troubleshooting
SSL handshake failed (
STRUST): the SAP system does not trust the GitHub/GitLab root certificate authority. Download the root certificate from the Git URL through your web browser, and upload it to theSSL client (Anonymous)andSSL client (Standard)identities in transactionSTRUST.Missing prerequisites: if certain core elements fail to activate, verify that your S/4HANA Private Cloud version meets the minimum baseline architecture specified in your Payhawk contractual documentation.