Week 1: Authentication and Data Connectivity 1

Unit 1: Course Introduction and Connectivity

Overview
Course Introduction and Connectivity Overview
Course agenda

Week 1: Authentication and Data Connectivity 1

▪ SAP Analytics Cloud authentication options
▪ Live connections to SAP HANA with SAML SSO

Week 2: Authentication and Data Connectivity 2

▪ Live connections to SAP NW with SAML SSO
▪ Live connections to SAP BusinessObjects BI Platform

Week 3: Authentication and Data Connectivity 3

▪ Live connections to cloud sources
▪ Import data connectivity
▪ Troubleshooting, direct authentication, Internet scenarios

© 2019 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 2

Course Introduction and Connectivity Overview
Data connectivity types

Live Connection Import Connection

▪ Performs analysis without data replication ▪ Data is imported into SAP Analytics Cloud
▪ Confidential data stays in customer landscape ▪ Leverages capabilities such as Planning and
▪ Data security implemented in the source system Smart Assist
is respected ▪ Best for data preparation and data blending
▪ Leverages existing investments built in source scenarios
systems ▪ Scheduled data replication
▪ Complex data modeling is performed centrally
by IT
▪ Low latency – near real-time
▪ End-to-end SSO accomplished via SAML 2.0

© 2019 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 3

Course Introduction and Connectivity Overview
Data sources

Live Import
Cloud data sources Cloud data sources
SAP Cloud Platform1 SAP S/4HANA Cloud SAP Marketing Cloud SAP Hybris Cloud for Customer SAP Cloud Platform1 SAP Business ByDesign SAP S/4HANA Cloud
SAP Marketing Cloud SAP SuccessFactors SAP Fieldglass SAP Workforce Analytics Concur
SAP data sources
Google BigQuery Google Drive Google Sheets Salesforce OData Dow Jones DNA
SAP HANA SAP BW SAP BW4/HANA SAP S/4HANA
3rd party Cloud Storage 3rd party CRM
SAP BPC Embedded SAP BusinessObjects Universe
SAP data sources
Access via SDI for SAP Cloud Platform & SAP HANA2
SAP BPC NW & MS SAP HANA SAP ERP SAP BusinessObjects Universe SAP BW
Apache Hive AWS SAP Vora SAP Sybase ASE, IQ, ESP OData
SAP S/4HANA SAP BW4/HANA SAP Integrated Business Planning
Microsoft SQL Server Spark SQL Oracle Teradata MaxDB
IBM DB2 MySQL Netezza Facebook Google+ Twitter Other data sources
IBM Microsoft SQL Server MySQL Netezza OData Oracle
Partner delivered
CSV Excel Progress OpenEdge Same data sources as SAP BI 4.23
DB2 Denodo Microsoft Analysis Services Microsoft Azure

Microsoft SQL Server MongoDB MongoDB Atlas MySQL Netezza Partner delivered
Oracle Oracle Essbase Oracle Exadata SAP IQ SAP SQL Anywhere Web Intelligence QuickBooks eloqua

Redshift Teradata Google BigQuery Cloudera Hortonworks Microsoft SharePoint Google Analytics

Amazon S3 NetSuite CRM & ERP Microsoft Dynamics CRM

Oracle Marketing Cloud Hubspot

Marketo
1. Requires SAP Cloud Platform DBaaS license MongoDB

2. SAP Cloud Platform connects to data using Smart Data Integration and smart data access adapters SugarCRM

3. This does not require the BI platform

© 2019 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 4
Course Introduction and Connectivity Overview
Live connections

Direct connection between browser and source system

▪ Only metadata is stored in SAP Analytics Cloud
▪ Browser retrieves the metadata from SAP Analytics Cloud and queries the source system
▪ Data doesn’t flow through SAP Analytics Cloud (some exceptions)
▪ Connections are made over HTTPS and use SAP’s information access layer (InA)
protocol for data queries

SAP HANA
SAP BW
SAP Analytics Metadata Data queries SAP BW/4HANA
Cloud queries SAP S/4HANA
SAP BusinessObjects BI4 Universes
SAP BPC

© 2019 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 5

Course Introduction and Connectivity Overview
What is metadata?

Connection definition: Connection name, description, data source server and port, preferred language etc.
No user and password are stored in SAC live connection description
Browser uses this information to
establish live connection to data
sources
Model definition: Linked data source query (BW query name, calculation view name, universe name)
Field definition (measures and dimensions)
Based on connection definition, Field types, scales, decimals, aggregation types, formulas, units and currencies, aggregation exceptions
model defines query on your data Dimension definition and hierarchy type
source based on data source Input control values to query data sources
metadata Data or dimension value from data sources are not stored in SAP Analytics Cloud, except values
of filters and input controls used in query, if any

Story definition: Linked models, story description, layout, labels, styling, page names, RSS feed definition, embedded
HTML, images, conditional formatting rules, linked analysis, navigation, chart types, chart positions in
Based on models, story defines story, specific chart parameters (color and styling, comment, variance definition, reference line
your dashboard definition, top N parameter, sorting parameter, all parameters depending on type of chart), filter values,
formulas, linked column relationships for filtering (live connection), story defined variables, etc.
Data or dimension value from data sources are not stored in SAP Analytics Cloud, except values
of filters and input controls used in query, if any

Metadata is:
“ID”, “Name”, “Phone Number”, “Salary”
Data is:
1, Alex Bean, 555-324-2342, $80,000
2, Corey Foo, 777-234-2318, $100,000

© 2019 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 6

Course Introduction and Connectivity Overview
Exceptions to data movement for live connections

▪ Smart grouping and predictive forecasting-

enabled
▪ R integration enabled for live models
▪ Blending between acquired and live models
▪ Search to insight for live models

© 2019 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 7

Course Introduction and Connectivity Overview
Cross-origin resource sharing (CORS)

Live connections with SAP Analytics Cloud using CORS

▪ CORS is an Internet standard that defines a way in which a browser and server can interact to determine
whether or not it is safe to allow the cross-origin request
▪ CORS allows us to get around browser’s same-origin policy
Resource 1

Get /resource 1
Response

Resource 2
Get /resource 2
Response

When a domain is requesting to interact with a resource on The domain from which resources are being requested can respond to the first domain
another domain, request headers are added from the first domain with the following HTTP response headers based on what configuration options are set:
in order to use the cross-origin resource sharing feature. These Access-Control-Allow-Origin
are the HTTP request headers that may be associated with the Access-Control-Allow-Credentials
requesting domain. Access-Control-Expose-Headers
- Origin Access-Control-Max-Age
- Access-Control-Request-Method Access-Control-Allow-Methods
- Access-Control-Request-Headers Access-Control-Allow-Headers

© 2019 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 8

Course Introduction and Connectivity Overview
Live connections workflow

Public Domain DMZ Customer Network

Firewall
Firewall
HTTPS SAP HANA
HTTPS CORS SAP BW
SAP Analytics SAML SAML
SAP BW/4HANA
Cloud SAP S/4HANA
Metadata Data SAP BusinessObjects BI4 Universes
SAP BPC

SAML
Firewall

Firewall

SAML 2 IDP

© 2019 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 9

Course Introduction and Connectivity Overview
SAML workflow

1. Service request (protected access) Login

5
2. Service needs authentication
Login Request
3. <SAMLRequest> in POST (HTTP body) in a 4
HTML form or in GET (URL parameter) <SAMLResponse>
6
4. Login request of IDP
3

Web Browser
5. Send credentials <SAMLRequest>
Identity Provider
6. Send SAML assertion as <SAMLResponse>
with secured user name identifier in HTTP body <SAMLResponse>
7. Forward <SAMLResponse> as POST 7 ACS
parameter to assertion consumer service of SP Resource
8. Send data of the service to the user 8
2
<SAMLRequest> Resource
1
Service Request
Service Provider
© 2019 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 10
Course Introduction and Connectivity Overview
On-premise import data connections

Additional on-premise components to deploy: SAP Analytics

1. SAP Cloud Connector Cloud
2. SAP Analytics Cloud agent

Cloud Connector
▪ Secure data transfers between the on-premise data
source and SAP Cloud Platform
Cloud Connector
SAP Analytics Cloud agent
▪ Connect and send query requests to the on-premise
data source SAP Analytics Cloud
▪ Supports Apache Tomcat 7 or higher Agent

▪ Java Standard Edition Runtime Environment version

7 or higher On-Premise Data
Sources

© 2019 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 11

Course Introduction and Connectivity Overview
Data import workflow

Public Domain DMZ Customer Network

Firewall
Firewall
SAP BPC NW
Data ODATA

SAP Analytics
Cloud Connector
Cloud Data

Data
SQL Databases
SAP BW
Firewall

Firewall
SAP Analytics Cloud Agent
File Server
SAP ERP
SAP BusinessObjects BI4 Universes
SAP BPC MS
SAP S/4HANA
Data

© 2019 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 12

Course Introduction and Connectivity Overview
Target audience and course requirements

Target Audience
▪ IT administrators
▪ Cloud architects

Course Requirements
▪ Background in SAP applications such as:
SAP HANA, SAP BW, SAP S/4HANA and
SAP BusinessObjects BI4
▪ Understanding of SAML SSO concepts

© 2019 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 13

Course Introduction and Connectivity Overview
Development system access

Option 1
▪ Deploy the provided solution system in your own AWS
account. Solution system contains 3 images that include:
− SAP NetWeaver IDP
− SAP BW/4HANA
− SAP HANA
− SAP BusinessObjects BI4.2 SP6
− SAP Web Dispatcher Reverse Proxy
▪ Requires existing subscription to SAP Analytics Cloud or
purchase of a new BI-only subscription for USD 23/month.

Option 2
▪ Use provided click-through demos that simulate working
with a real system

© 2019 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 14

Thank you.
Contact information:

open@sap.com
Follow all of SAP

www.sap.com/contactsap

© 2019 SAP SE or an SAP affiliate company. All rights reserved.

No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company.
The information contained herein may be changed without prior notice. Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors. National product specifications may vary.
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only, without representation or
warranty of any kind, and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials.
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services, if any. Nothing herein should be construed as constituting an additional
warranty.
In particular, SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation, or to develop or release any functionality mentioned therein. This document, or any related presentation,
and SAP SE’s or its affiliated companies’ strategy and possible future developments, products, and/or platforms, directions, and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice. The information in this document is not a commitment, promise, or legal obligation to deliver any material, code, or
functionality. All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations. Readers are cautioned not to place undue reliance on these forward-looking statements, and they
should not be relied upon in making purchasing decisions.
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries. All other product and service names
mentioned are the trademarks of their respective companies.
See www.sap.com/copyright for additional trademark information and notices.