Administration & Troubleshooting

/IWFND/MAINT_SERVICE

/IWFND/MAINT_SERVICE is the SAP Gateway transaction for registering, activating and maintaining OData V2 services, including their system aliases and ICF nodes, on the system that serves SAP Fiori apps. OData V4 services are published separately, as service groups in /IWFND/V4_ADMIN, so activating an app often involves both transactions.

Quick facts

Type
SAP Gateway administration transaction
Full name
Activate and Maintain Services
Layer
Services & APIs
Scope
OData V2 services; V4 service groups use /IWFND/V4_ADMIN
Run on
SAP Gateway hub system (the backend itself in embedded deployment)
Who uses it
Basis administrators, SAP Fiori implementation teams
Applies to
SAP S/4HANA on-premise and Private Edition, SAP ERP (ECC)
Layer: Services & APIsWhere it sits ▾
Where it sits: L4 · Services & APIsLayer: Services & APIs.L1L2L3L4L5L6BTP

Layer: Services & APIs

Open the architecture map →

What does /IWFND/MAINT_SERVICE do?

/IWFND/MAINT_SERVICE, titled "Activate and Maintain Services" and also reachable in SPRO under the SAP Gateway OData Channel settings, manages every OData V2 service registered on the SAP Gateway system. In one screen it:

  • registers a backend service on the Gateway system under an external name;
  • assigns one or more system aliases that route requests to the implementing backend;
  • shows and activates the service's ICF node;
  • removes services and their aliases;
  • jumps to the SAP Gateway Client, the browser and the error log for a selected service.

/IWFND/MAINT_SERVICE is the switch that turns an implemented OData V2 service into one an SAP Fiori app can actually call.

How do you activate an OData service step by step?

To activate Alder Manufacturing's custom service ZALDER_SUPPLIER_SRV:

  1. Start /IWFND/MAINT_SERVICE and choose Add Service.
  2. Enter the backend's system alias (LOCAL in an embedded deployment) and optionally the technical service name, then retrieve the services.
  3. Select the service and add it. Enter a package for transport, or a local package for a test.
  4. Back on the main screen, select the service and confirm that the ICF node shows a green status; activate it if not.
  5. Check the system alias assignment.
  6. Test with SAP Gateway Client or the browser call of the service document.
  7. Grant start authorization: add the service to the user's PFCG role as a TADIR service (R3TR IWSG, service name plus version suffix) so that S_SERVICE is filled.

Each step stays visible afterwards, so /IWFND/MAINT_SERVICE is the first stop when a service seems missing.

When should you use /IWFND/MAINT_SERVICE, and when not?

Use /IWFND/MAINT_SERVICE for:

  • custom OData V2 services from SEGW projects or CDS views published as V2;
  • single SAP-delivered services that a mass activation skipped;
  • fixing system aliases and ICF nodes of existing services.

Use something else for:

  • OData V4 service groups: /IWFND/V4_ADMIN.
  • Many SAP Fiori apps at once: task lists run with STC01 activate a business role's apps and services: SAP_FIORI_CONTENT_ACTIVATION for SAP template roles and SAP_FIORI_FCM_CONTENT_ACTIVATION for customer roles, as named in the SAP S/4HANA 2025 documentation.
  • RAP service bindings: publishing the service binding in ABAP Development Tools activates its local service endpoint; the registration details depend on the release and the OData version.

Choosing the right tool by OData version and volume keeps /IWFND/MAINT_SERVICE for targeted fixes rather than bulk work.

What do common /IWFND/MAINT_SERVICE errors mean?

SymptomLikely causeFix
Service not listed under Add ServiceWrong system alias, or the service is not generated in the backendCheck the alias and the backend service registration
"No service found for namespace …" at runtimeService not registered or wrong version on the Gateway systemRegister the service, check the version suffix
"No System Alias found for Service …"Service registered without an alias for this user or clientAssign the system alias
HTTP 403 on the service URLICF node inactive, or missing S_SERVICEActivate the node; extend the PFCG role
Old metadata after a transportCached modelRun /IWFND/CACHE_CLEANUP and /IWBEP/CACHE_CLEANUP

Most /IWFND/MAINT_SERVICE problems are registration, alias or authorization gaps, not defects in the service code.

  • /IWFND/V4_ADMIN: publishes and manages OData V4 service groups.
  • /IWFND/GW_CLIENT: sends and replays requests against the service.
  • /IWFND/ERROR_LOG: shows runtime errors after activation.
  • SICF: maintains ICF nodes directly, for example the shared V4 node.
  • PFCG: adds the service to roles, so users receive the S_SERVICE start authorization.
  • SEGW: opens the Service Builder project behind a custom V2 service.
  • /IWFND/CACHE_CLEANUP and /IWBEP/CACHE_CLEANUP: clear hub and backend metadata caches.

/IWFND/MAINT_SERVICE activates the service; these transactions prove that it actually works.

/IWFND/MAINT_SERVICE vs. /IWFND/V4_ADMIN vs. SICF: what is the difference?

/IWFND/MAINT_SERVICE/IWFND/V4_ADMINSICF
ManagesOData V2 servicesOData V4 service groupsICF nodes for all HTTP services
Unit of activationOne serviceOne service groupOne URL path node
ICF handlingOne node per V2 serviceOne shared V4 nodeAny node, generically
Typical useRegister, alias, activate a V2 servicePublish V4 services and route themActivate or check a node by path

FAQ

Is /IWFND/MAINT_SERVICE needed in an embedded deployment?

Yes. In an embedded deployment the hub and backend components run in the same system, but OData V2 services still have to be registered and activated there. The system alias is typically LOCAL instead of a remote backend.

Why is my OData V4 service not in /IWFND/MAINT_SERVICE?

/IWFND/MAINT_SERVICE manages OData V2 services only. OData V4 services are published as service groups in /IWFND/V4_ADMIN, which routes them through one shared ICF node instead of one node per service.

Does activating an OData service grant users access?

No. Activation makes the service callable, but each user still needs start authorization through authorization object S_SERVICE, normally granted by adding the service to a PFCG role. Without it, the request fails with an authorization error.

Can /IWFND/MAINT_SERVICE be used in SAP S/4HANA Cloud Public Edition?

SAP documents no customer use of it for Public Edition, where SAP operates the services behind delivered apps. The transaction applies to SAP S/4HANA on-premise, Private Edition and SAP ERP systems running SAP Gateway.

Sources

Applies to
SAP S/4HANA on-premise · SAP S/4HANA Cloud Private Edition · SAP ERP (ECC)
Last reviewed

SAP, SAP Fiori, SAPUI5, SAP S/4HANA, SAP BTP and other SAP products and services mentioned are trademarks or registered trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries. This guide is independent and is not affiliated with, sponsored or endorsed by SAP SE.