Creating Live Data Connections to Cloud Applications

Let's explore the standard process for creating live data connections to cloud applications. Creating live data connections to cloud applications can be broken down into three key steps:

1. Set up a communication system in the cloud application.
2. Set up a communication arrangement in the cloud application.
3. Create the live data connection in SAP Analytics Cloud.

• SAML SSO must be enabled in SAP Analytics Cloud.
• A system user who logs on to both the cloud application and SAP Analytics Cloud system must be created using the SAML Identity Provider (IdP) in both the cloud application and SAP Analytics Cloud. It is used by both systems when creating the live data connection.

  For example:

  • SAP Analytics Cloud: BI Admin role is required.
  • SAP S/4HANA Cloud: The Administrator role (role template ID SAP_BR_ADMINISTRATOR) is required.
• In order for the connection from SAP Analytics Cloud to the cloud application to be successful, the communication user name in the cloud application must be the same as the SAML attribute used to authenticate users to SAP Analytics Cloud.

  For example, if the USER ID field is used in SAP Analytics Cloud, then the USER ID field must match the communication User Name of the cloud application system.

Where cloud application system user names can't have special characters, such as SAP S/4HANA Cloud, then the SAP Analytics Cloud system can't be configured to use the Email attribute for authentication.

We'll use SAP S/4HANA Cloud as the example cloud application in this lesson. In this scenario, users need to create stories in SAP Analytics Cloud using data that is held in SAP S/4HANA Cloud, so a live connection will be created using OAuth. With OAuth, you do not need to configure SAP Analytics Cloud to use the same SAML IdP as you use for SAP S/4HANA Cloud.

SAP Analytics Cloud is used as analytics client consuming SAP S/4HANA Cloud data exposed using SAP S/4HANA Cloud analytical queries called CDS views. For this purpose, you can configure a live data connection in SAP Analytics Cloud. It allows you to create an SAP Analytics Cloud model based on an SAP S/4HANA Cloud analytical query and consume the result set in an SAP Analytics Cloud story.

This step is completed by the SAP cloud application administrator. Before the communication system is created, you provide the SAP S/4HANA Cloud administrator with the SAP Analytics Cloud tenant URL.

The process to create a communication system for live connections to cloud applications is slightly different than the one used for data import connections. The SAP S/4HANA Cloud administrator will:

1. Open the Communication Systems app and create a new communication system.
2. Add a System ID and System Name.
3. Enter the Host Name.
4. Add the SAP Analytics Cloud Provider Name to the OAuth 2.0 SAML Issuer field.
5. Enable OAuth 2.0 Identity Provider, by moving the switch to On.
6. In the User for Inbound Communication section, they assign the system user.

Once the communication system is created, they provide you with the token User Name and Password as you will need them when creating the connection in SAP Analytics Cloud.

Then, once the connection is created in SAP Analytics Cloud, you provide the Provider Name and signing certificate that will need to be uploaded in order to complete the SSO.

This step is completed by the SAP cloud application administrator. After the communication system is created, the SAP S/4HANA administrator then creates the communication arrangement. The SAP S/4HANA Cloud administrator will:

1. Select the SAP_COM_0065 communication scenario.
2. Add the Communication System that was created.
3. In Additional Properties, they add the Tenant ID and ensure that the System Alias field is blank.
4. In Inbound Communication, they select the User Name for the system user and add OAuth 2.0 to the Authentication Method.
5. Set all Outbound Services to Inactive.

Once the communication arrangement is created, they provide you with the information you will need to fill out the Host and OAuth Scope fields when creating the connection in SAP Analytics Cloud.

This step is completed by you, the SAP Analytics Cloud administrator. A new connection is created in SAP Analytics Cloud.

Data modelers can then use data from this live connection by creating new live models in SAP Analytics Cloud.

We will cover the steps in detail in the practice exercise for this lesson, however, using SAP S/4HANA Cloud as a cloud application example, let's take a look at the summary of the process flow.

1. In the side navigation menu, go to Connections.
2. Select Add Connection and select SAP S/HANA from the Connect to Live Data options.
3. In the New SAP S/4HANA Connection dialog, enter a connection Name and Description.
4. Enter the following information, as provided by the SAP S/4HANA Cloud administrator:
   • Enter the Host.
   • Enter the Token Service User used to connect to the cloud application.
   • Enter the Token Service Password for the inbound communication user.
   • Enter the OAuth Scope as a space-separated list.

     For example:

     SAP_BW_INA_BATCHPROCESSING_HTTP SAP_BW_INA_GETCATALOG_HTTP SAP_BW_INA_GETRESPONSE_HTTP SAP_BW_INA_GETSERVERINFO_HTTP SAP_BW_INA_LOGOFF_HTTP SAP_BW_INA_VALUEHELP_HTTP
5. Download the signing certificate. Provide this to the SAP S/4HANA Cloud administrator, who will upload it in the communication system to create the trusted connection.
6. Select OK. The new connection is added to the list of connections in the Connections area in SAP Analytics Cloud.

Detailed steps for creating a live data connection to SAP S/4HANA can be found here: Live Data Connection to SAP S/4HANA Cloud Using OAuth 2.0 | SAP Help Portal.

As with import connections, live connections are not tested until you create a model. To test your live data connection, you can create an SAP Analytics Cloud model using the newly created connection. We'll use SAP S/4HANA as an example.

1. From the Modeler start page, select Live Data Model from the two Create New options.
2. Select system typeSAP BW.

   If you're creating a model from an SAP S/4HANA live data connection, you also select the SAP BW system type.

3. Select your newly created connection.
4. Select the Input Help icon to search for a data source or choose one from a list.
5. The model must be created based on a query or view that contains a measure. Drag data from the Available Data list to the Selected Data and Filters areas to build a query.
6. Select OK.

   If the data appears in the data integration view, then you successfully created the connection.

You can find detailed information on creating a model from a live connection here: Create a Model from a Live Data Connection | SAP Help Portal.

The standard scenario for creating live data connections to SAP S/4HANA is detailed in this lesson, however, there are other scenarios for creating live data connections to SAP S/4HANA available.

1. If you want to create stories in SAP Analytics Cloud using data you have in SAP S/4HANA Cloud, and then embed stories in your SAP S/4HANA Cloud system, go to: Integrating SAP Analytics Cloud.
2. If you want to create stories in SAP Analytics Cloud using data you have in SAP Marketing Cloud, and then embed stories in your SAP Marketing Cloud system, go to: Integration with SAP Analytics Cloud (1SO).

Now, let's explore a second scenario for creating live data connections to cloud applications. We'll take a closer look at creating a live data connection to SAP Datasphere, as the process is a little different to other cloud applications. Creating live data connections to SAP Datasphere can be broken down into three key steps:

1. Add the SAP Analytics Cloud tenant as a trusted origin in SAP Datasphere.
2. Secure the SAP Datasphere space using user assignment.
3. Create the live data connection in SAP Analytics Cloud.

In this scenario, users need to create stories in SAP Analytics Cloud using data that is held in SAP Datasphere.

Connections between SAP Analytics Cloud and SAP Datasphere can be established across tenants and data centers. So, a live connection will be created to allow users to build stories directly against the data that is modeled in SAP Datasphere.

This step is completed by the SAP Datasphere administrator. Before the trusted origin is added to SAP Datasphere, you provide the SAP Datasphere administrator with the SAP Analytics Cloud tenant URL.

The SAP Dataphere administrator will:

1. Go to System → Administration and select the App Integration tab.
2. Scroll down to the Trusted Origins section and select Add a Trusted Origin.
3. Add the URL for the SAP Analytics Cloud tenant.
4. Select Save.

Once the trusted origin is added, they provide you with the Host and HTTPS Port as you will need them when creating the connection in SAP Analytics Cloud.

This step is completed by the SAP Datasphere administrator. They use the User Assignment in order to add roles to secure the workspace.

The SAP Dataphere administrator will:

1. Go to Space Management and select the User Assignment tab.
2. Add users and the relevant scoped roles required to secure the workspace.

This step is completed by you, the SAP Analytics Cloud administrator. A new connection is created in SAP Analytics Cloud. Story designers can then use data from this live connection by creating new stories using SAP Datasphere as the data source. There is no need to use a live data model.

We will cover the steps in detail in the practice exercise for this lesson, however, using SAP Datasphere as a cloud application example, let's take a look at the summary of the process flow.

1. In the side navigation menu, go to Connections.
2. Select Add Connection and select SAP Datasphere from the Connect to Live Data options.
3. In the New SAP Datasphere Connection dialog, enter a connection Name and Description.
4. Enter the following information, as provided by the SAP Datasphere administrator:
   • Enter the Host.
   • Enter the HTTPS Port used to connect to SAP Datasphere.
   Note

   Note that SAML Single Sign On is preselected as the authentication method allowed. A valid SAP Datasphere user account in that tenant's Identity Provider is required to log on to the data source.
5. Select OK. The new connection is added to the list of connections in the Connections area in SAP Analytics Cloud.

Detailed steps for creating a live data connection to SAP Datasphere can be found here: Live Data Connection to SAP Datasphere.