Setting Up Connectivity and Content Exposure

Objective

After completing this lesson, you will be able to establish connectivity between SAP BTP and SAP S/4HANA Cloud and expose business content

Connectivity and Content Exposure Setup on SAP S/4HANA Cloud

The following steps should be performed before importing and using the federated content from SAP S/4HANA Cloud on SAP Build Work Zone, standard edition:

  • Set up the connectivity between the SAP S/4HANA Cloud system and SAP Build Work Zone, standard edition. (While the on-premise setup utilizes Cloud Connector and principal propagation, the cloud setup makes use of Communication Systems).
  • Set up the prerequisites for content exposure.
  • Choose and expose the required roles.

Let’s start with setting up the connectivity.

Prerequisites

  • SAP S/4HANA Cloud admin user with admin access
  • SAP BTP platform admin user with admin access to the SAP BTP subaccount

Note

These could either be your personal or general users with admin roles assigned on the respective systems.

Create a Communication System to Establish Connectivity with SAP Build Work Zone, standard edition

Prerequisites

An X.509 client certificate (private and public key) should be uploaded to your SAP BTP subaccount at Connectivity → Destinations → Certificates.

Note

Client Certificate Authentication is the recommended approach for a production landscape. You can find more information on the concept here. For an initial basic setup, it is also possible to choose the Basic Authentication with User Name and Password, get everything working and then introduce the use of certificates. Both configurations will be mentioned at the relevant steps in the following section.

Watch the following video to learn how to create a communication system to establish connectivity with SAP Build Work Zone, standard edition:

The following parameters are mentioned in the video and are included here for your reference:

  • Recommended Communication System Name: LPD_EXPOSURE_COM_0647_SYS
  • Host Name: <subdomain>.launchpad.cfapps.<region>.hana.ondemand.com
  • Recommended User Name: LPD_EXPOSURE_COM_0647_USER

Result

The saved communication system has the Editing Status field showing the status Active.

Screenshot of the finished communication system highlighting the editing status which shows as “Active”.

Note

Related Information

How to Create Communication Users | SAP Help Portal

How to Create Communication Systems | SAP Help Portal

Export Trust Certificate of the Subaccount

In preparation for the next step, you need to export the trust certificate from SAP BTP subaccount destinations and upload it to SAP S/4HANA Cloud. This certificate is required for the second communication system that will be set up in the next step to allow the end users to consume back-end data via SAML bearer assertion.

Steps

  1. Use the SAP BTP platform admin user to log on to your subaccount.

  2. Go to Connectivity → Destinations.

  3. Choose Download Trust to export the file.

    Screenshot of the SAP BTP Cockpit Destinations tab, highlighting the “Download Trust” button. 

  4. Save the trust file. You will have to upload it to the communication system, created in the next step. 

Result

Screenshot of the browser window showing the successful download of the trust file. 

Create a Communication System for Consuming the Content

End users who access SAP Fiori apps either via SAP Build Work Zone, standard edition or SAP Mobile Start will need to be authenticated against SAP S/4HANA Cloud in real time to ensure that they only access the data that they have permissions for. This can be achieved by using a communication system that establishes trust between SAP BTP subaccount and SAP S/4HANA Cloud. The certificate obtained from the subaccount in the previous step will be uploaded into the communication system to achieve this.

Prerequisite

Trust certificate that was exported from the SAP BTP subaccount in the previous step

Watch the following video to learn how to create a communication system for consuming the content:

The following parameters are mentioned in the video and is included here for your reference:

  • Recommended Communication System Name: LPD_CONSUME_SYS
  • SAML Bearer Issuer (Template): cfapps.<region>.hana.ondemand.com/<subaccountID> (this can be copied from the System Certificate Subject "CN" on the right side)

Related Information

Configure Communication for the Content Consumption

Expose SAP S/4HANA Cloud Business Content

ExerciseStart Exercise

Log in to track your progress & complete quizzes

Learning

SAP FacebookSAP YoutubeSAP LinkedIn