Scribd
Upload
10 views

help.sap.com_http.svc_dynamicpdfcontentpreview_deliverable_id=2

This document provides detailed instructions for configuring a live data connection between SAP Analytics Cloud and SAP S/4HANA, including setting up authentication methods like SAML and OAuth 2.0. It outlines steps for enabling SAP Information Access (InA) on the ABAP Application Server, configuring web browsers for third-party cookies, and creating the connection in SAP Analytics Cloud. Additionally, it emphasizes the importance of ensuring proper cookie settings and SSO configurations for seamless user experience.

Uploaded by

coxopi7544
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
10 views

help.sap.com_http.svc_dynamicpdfcontentpreview_deliverable_id=2

This document provides detailed instructions for configuring a live data connection between SAP Analytics Cloud and SAP S/4HANA, including setting up authentication methods like SAML and OAuth 2.0. It outlines steps for enabling SAP Information Access (InA) on the ABAP Application Server, configuring web browsers for third-party cookies, and creating the connection in SAP Analytics Cloud. Additionally, it emphasizes the importance of ensuring proper cookie settings and SSO configurations for seamless user experience.

Uploaded by

coxopi7544
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 6

2/12/25, 2:49 AM

5. Double click on IF_HTTP_EXTENSION~HANDLE_REQUEST and add the following code:

method IF_HTTP_EXTENSION~HANDLE_REQUEST.
DATA:
html_content TYPE string.

html_content = '<html><script type="text/javascript">window.close();</script></html>'.


server->response->set_header_field( name = 'Cache-Control' value = 'no-cache,no-store').
server->response->set_cdata( data = html_content ).
endmethod.

6. Select Save, and then Activate.

7. Enter transaction code: SICF.

8. Enter Service Path: /sap/bw/ina, and then press Enter.

9. Under default_host sap bw , right click ina, then choose New Sub-Element.

10. In Service Name, enter auth then select Input.

11. Add a description.

12. Open the Handler List tab, and enter ZCL_DUMMYAUTH_SERVICE

This is custom documentation. For more information, please visit SAP Help Portal. 225
2/12/25, 2:49 AM

13. Save and return to the main menu.

14. (Optional) Check if the auth package is installed.

Open the following URL in your browser: https://<Your_ABAP_Server>/sap/bw/ina/GetServerInfo?sap-client=<Your_ABAP_Client_ID>. Make


sure you're redirected to your IdP login page, and that you don't see a 404 page after login.

You can see the HTML file merely closes the dialog. This is needed because SAP Analytics Cloud will initiate this URL (/sap/bw/ina/auth). As this URL is SAML
protected the browser first redirects to your IdP. The IdP then recognizes that the user is already authenticated from SAP Analytics Cloud and has a session. So your
browser follows the redirects by the IdP and finally the dummy HTML content is delivered which closes the dialog.

Configure Your Web Browsers

Context
Your user's browsers must allow 3rd party cookies from the ABAP AS domain and pop-ups from the SAP Analytics Cloud domain. This can be easily configured in the browser's
settings. As an example, see the steps below for Google Chrome.

Procedure

1. At the top-right of your Google Chrome browser, click Settings .

2. Under Privacy and security click Site Settings Pop-ups and redirects .

3. In the Allow section, add the domains relevant for your SAP Analytics Cloud tenant.

[*.]sapanalytics.cloud
[*.]hanacloudservices.cloud.sap
[*.]hcs.cloud.sap
[*.]analytics.sapcloud.cn

4. Go back to Privacy and security and click Cookies and other site data.

5. Under Sites that can always use cookies add your ABAP AS domain.

Create the Live Connection in SAP Analytics Cloud

Context

Now that you've configured your data source, you can finally create the live conection in SAP Analytics Cloud.

Procedure
1. From the side navigation, choose Connections (Add Connection) .

The Select a data source dialog will appear.

2. Expand Connect to Live Data and select SAP S/4HANA.

3. In the dialog, enter a name and description for your connection.

The connection name cannot be changed later.

4. Set the connection type to Direct.

5. Add your data source's host name, HTTPS port, and Client.

This is custom documentation. For more information, please visit SAP Help Portal. 226
2/12/25, 2:49 AM
6. (Optional) Choose a Default Language from the list.

This language will always be used for this connection and cannot be changed by users without administrator privileges.

 Note
You must know which languages are installed on your data source system before adding a language code. If the language code you enter is invalid, SAP Analytics
Cloud will default to the language specified by your system metadata.

7. Under Authentication Method select one of the following:

None - Using the None authentication option allows you to connect to data source systems that use SSO that are not based on SAML 2.0. For more information,
see Using the 'None' Authentication Option.

User Name and Password - Enter a user name and password for your data source system.

SAML Single Sign On - Select this option for versions of SAP S/4HANA on-premise older than 1909 (7.54) or if you are using the Cloud Connector to connect to
live SAP S/4 HANA.

SAML Single Sign On (Standard-Compliant) - Select this option for versions SAP S/4HANA on-premise 1909 (7.54) or newer.

 Note
To enable single sign-on for the mobile app, see the "Cloud Connector-based Mobile Single Sign-On" topic in the SAP Analytics Cloud Mobile Administration Guide.

8. If you are connecting to SAP S/4HANA through a front-end server, in the Connection Details section enter a Target System Alias.

 Note
Leave this setting empty if you do not use a front-end server.

For example, if you use an SAP Fiori Front-end Server (FES) to connect to a SAP S/4HANA, you must enter the system alias for your SAP S/4HANA back-end. For
information on setting the back-end system alias, see Creating BW Systems in the Portal.

9. (Optional) Select Let SAP support user sign in using basic authentication for this connection. By enabling this feature, support users are granted access to the new
live data connection using basic authentication.

 Note
Advanced features are not available when the Authentication Method is set to none.

To enable an Advanced Feature, you must allow live on-premise data to securely leave your network.

Results
Once you've created your live data connection, test it by creating a model.

Live Data Connection to SAP S/4HANA On-Premise Using a Tunnel Connection


Setup the Cloud Connector between your SAP S/4HANA system and SAP Analytics Cloud to establish a live tunnel connection.

Who does this apply to?

Users with Create, Read, Update, Delete and Maintain permissions for Connections.

Users with Execute permission for Other Data Sources.

Admin, Application Creator, BI Content Creator, BI Admin, and Planner Reporter standard application roles.

Setting up a live connection requires working with the SAP Analytics Cloud system owner and different IT and application stakeholders within your organization. Most
configuration steps are done on your SAP NetWeaver ABAP Application Server (AS) before creating the connection in your SAP Analytics Cloud tenant.

Prerequisites
Configure cross-site cookies: To ensure that Chrome and other browsers allow cross-site access to your SAP on-premise data source cookies from SAP Analytics
Cloud, you must configure your SAP on-premise data source to issue cookies with specific attributes. Without these settings, user authentication to your live data
connections will fail, and Story visualizations based on these connections will not render.

For steps on how to do this, see SameSite Cookie Configuration for Live Data Connections.

Setup SSO (optional): If you want users to have a single sign-on experience to your data, check you are using same Identity Provider (IdP) for SAP Analytics Cloud and
SAP NetWeaver. For more information on setting up your identity provider in SAP Analytics Cloud, see Enable a Custom SAML Identity Provider.

If you have multiple authentication methods configured on your ABAP AS, see Alternative Logon Order.

Enable InA on your ABAP Application Server

Context

This is custom documentation. For more information, please visit SAP Help Portal. 227
2/12/25, 2:49 AM
SAP Information Access (InA) is a REST HTTP-based protocol used by SAP Analytics Cloud to query your data sources in real time. Confirm that your InA package is enabled
and services are running on the ABAP AS for your data source.

Procedure
1. Check that your InA package is enabled.

To check if the Ina package is enabled, open the following URL in your browser: https://<Your_ABAP_Server>/sap/bw/ina/GetServerInfo?sap-client=
<Your_Client_ID>. Make sure you are prompted for user credentials, and after login you get a JSON response. Replace <Your_ABAP_Server> with your ABAP
system host, and <Your_Client_ID> with your SAP BW client ID.

2. Check that the required Information Access Services are active in your SAP BW/4HANA or SAP BW system.

a. Access your system using SAP Logon.

b. Enter transaction code: SICF.

c. Enter the Service Path: /sap/bw/ina and then select Execute.

The following dialog will appear:

d. Under Virtual Hosts/Services go to: default_host sap bw ina .

e. Make sure that the following services are active:

BatchProcessing
GetCatalog
GetResponse
GetServerInfo
Logoff
ValueHelp

Configure Cloud Connector Tunnel Connection

Context
Setup the Cloud Connector between your data source system and SAP Analytics Cloud to establish a live tunnel connection.

Procedure
Follow these configuration and setup instructions:

a. Configure Your On-Premise Systems to Use the Cloud Connector

b. (Optional for SSO) Set Up Trust Between the Cloud Connector and Your On-Premise ABAP Systems (BW, BPC, or S/4HANA)

This is custom documentation. For more information, please visit SAP Help Portal. 228
2/12/25, 2:49 AM

Create the Live Connection in SAP Analytics Cloud

Context
Now that you've configured your data source, you can finally create the live conection in SAP Analytics Cloud.

Procedure
1. From the side navigation, choose Connections (Add Connection) .

The Select a data source dialog will appear.

2. Expand Connect to Live Data and select SAP S/4HANA.

3. In the dialog, enter a name and description for your connection.

The connection name cannot be changed later.

4. Set the connection type to Tunnel.

5. Add your data source's host name, HTTPS port, and Client.

6. (Optional) Choose a Default Language from the list.

This language will always be used for this connection and cannot be changed by users without administrator privileges.

 Note
You must know which languages are installed on your data source system before adding a language code. If the language code you enter is invalid, SAP Analytics
Cloud will default to the language specified by your system metadata.

7. Under Authentication Method select one of the following:

User Name and Password - Enter a user name and password for your data source system. Only the user whose credentials you added will have access to the live
data connection.

SAML Single Sign On - Select this option if you've completed the necessary prerequistes and steps for SSO outlined in the rest of this article.

 Note
To enable single sign-on for the mobile app, see the "Cloud Connector-based Mobile Single Sign-On" topic in the SAP Analytics Cloud Mobile Administration Guide.

Results
Once you've created your live data connection, test it by creating a model.

Live Data Connection to SAP S/4HANA Cloud Edition via OAuth


You can create a live data connection from SAP Analytics Cloud to your S/4HANA system that uses OAuth 2.0.

Prerequisites
SAP Analytics Cloud can be hosted either on SAP data centers or on non-SAP data centers (for example, Amazon Web Services (AWS)). Determine which
environmentSAP Analytics Cloud is hosted on by inspecting yourSAP Analytics Cloud URL:

A single-digit number, for example us1 or jp1, indicates an SAP data center.

A two-digit number, for example eu10 or us30, indicates a non-SAP data center.

You must use OAuth 2.0 for authentication.

SAML Single Sign-On (SSO) must be enabled in SAP Analytics Cloud. For more information, see Enable a Custom SAML Identity Provider. The following settings must
be applied:

1. Under Step 3 , set the SAML User Mapping to Custom SAML User Mapping. Under Security Users , the value in the Custom SAML User Mapping
column must equal the User Data User Name of the corresponding business user in the SAP S/4HANA system.

You must be connection to SAP Cloud Identity Services. For more information, see SAP Cloud Identity Services - Identity Provisioning.

The following steps must be carried out by a user who logs on to both the SAP S/4HANA and SAP Analytics Cloud system via the SAML Identity Provider. For the steps
in the SAP Analytics Cloud system, the BI Admin role is required. For the steps in the SAP S/4 HANA system, the Administrator role (role template ID
SAP_BR_ADMINISTRATOR) is required. For more information, see SAP Analytics Cloud Integration.

To display custom analytical queries you must apply SAP Note 2710858.

Context

The steps below show how to connect SAP Analytics Cloud to SAP S/4HANA Cloud Edition using OAuth 2.0.

This is custom documentation. For more information, please visit SAP Help Portal. 229
2/12/25, 2:49 AM

 Note
With OAuth 2.0, you do not need to configure SAP Analytics Cloud to use the same SAML identity provider (IdP) as you use for SAP S/4HANA cloud edition.

However, there are other scenarios available:

1. If you want to create stories in SAP Analytics Cloud using data you have in SAP S/4HANA Cloud Edition, and then embed stories in your SAP S/4HANA Cloud Edition
system, see Integrating SAP Analytics Cloud.

2. If you want to create stories in SAP Analytics Cloud using data you have in SAP Marketing Cloud, and then embed stories in your SAP Marketing Cloud system, see
Integration with SAP Analytics Cloud (1SO).

Procedure
1. Add a remote system to SAP Analytics Cloud.

a. From the side navigation, choose Connections (Add Connection) .

The Select a data source dialog will appear.

b. Expand Connect to Live Data and select SAP S/4HANA.

c. In the dialog, enter a name and description for your connection.

The connection name cannot be changed later.

d. Set the connection type to SAP S/4HANA Cloud.

e. In the Host field, enter the URL for your SAP S/4HANA system.

For example, <MySystem>.s4hana.ondemand.com.

f. (Optional) Choose a Default Language from the list.

This language will always be used for this connection and cannot be changed by users without administrator privileges.

 Note
You must know which languages are installed on your SAP S/4HANA system before adding a language code. If the language code you enter is invalid, SAP
Analytics Cloud will default to the language specified by your system metadata.

g. Under Authentication Method, select OAuth 2 SAML Bearer Assertion.

h. Select to copy the provider name.

You will need to add this to your SAP S/4HANA cloud system.

i. Select Download Signing Certificate to save the signing certificate for SAP Analytics Cloud.

You will need to add this to your SAP S/4HANA cloud system.

The New S/4HANA Live Connection dialog will be half completed. Keep the dialog open and switch to a new browser tab for step 3.

2. Create a communication system in SAP S/4HANA.

a. Open the Maintain Communication Systems app from the SAP Fiori Launchpad.

b. Click New.

c. Under Technical Data General Host Name enter the host name of your SAP Analytics Cloud.

The host name follows the schema: xxx.sapanalytics.cloud

d. Under Technical Data OAuth 2.0 Settings , enter the Authorization URL and Token URL without the https:// prefix.

To find the Authorization URL and Token URL, in SAP Analytics Cloud, from the side navigation, choose System Administration App Integration .

For SAP data centers:

Example Authorization URL: oauthasservices-«xxx».int.sap.hana.ondemand.com/oauth2/api/v1/authorize.

Example Token URL: oauthasservices-«xxx».int.sap.hana.ondemand.com/oauth2/api/v1/token.

For non-SAP data centers:

Example Authorization URL: https://<Tenant Name>.authentication.<Region ID>.hana.ondemand.com/oauth/authorize.

Example Token URL: https://<Tenant Name>.authentication.<Region ID>.hana.ondemand.com/oauth/token.

e. Under OAuth 2.0 Identity Provider select Enabled.

f. Enter the provider name and upload the signing certificate obtained in Step 2.

g. Create a User for Inbound Communication with the Authentication Method User Name and Password and note down the user name and password.

h. Save the communication system.

3. Create a communication arrangement in SAP S/4HANA.

a. Open the Communication Arrangements app.

b. Click New.

c. Select the communication scenario SAP_COM_0065 and the communication system you created in Step 2.

d. Under Additional Properties Tenant ID maintain your SAP Analytics Cloud tenant ID.

This is custom documentation. For more information, please visit SAP Help Portal. 230

You might also like