Live Data Connection to SAP HANA 2.0 on SAPCP Cloud Foundry (With HDI Containers)

To access SAP HANA HDI containers on a SAP Cloud Platform (SAPCP) system that is running a Cloud Foundry (CF) environment, you can create a live data connection using the SAP HANA Analytics Adapter for Cloud Foundry.

Prerequisites

Note
The SAP Cloud Platform geo map feature is not currently supported for this connection type.

Procedure

  1. Install and configure tools.
    1. Download and install the Cloud Foundry CLI.
    2. Download and install the Cloud Foundry CLI MTA.
      Install the plugin using the command: 
      cf install-plugin mta-plugin-windows.exe -f
    3. Download and install Oracle JDK 8 or SAP JDK 8.
      To verify that the JDK is ready, check the version of the JDK you have installed. For example:
      javac -version
    4. Download and install Apache Maven.
      To verify that Maven is ready, check the version of Maven you have installed. For example:
      mvn --version
    5. Download and install Node.js.
      To verify that Node is ready, check the version of Node you have installed. For example:
      node --version
      Also verify that npm (Node Package Manager) is installed with Node. For example: 
      npm --version
    6. Set npm for the sap registry modules with the command: 
      npm config set @sap:registry https://npm.sap.com
  2. Deploy the analytics adapter for SAP HANA.
    1. Create a local folder. For example: c:\haa.

      This directory is referred to as <HAA_ROOT> in the following steps.

    2. Download or clone the analytics adapter (HAA) project from SAP GitHub.
    3. Unzip the file in the <HAA_ROOT>.
  3. Build and deploy the analytics adapter.
    1. Start a command prompt window.
    2. Build the mta file with the command: 
      java -jar mta.jar --build-target=CF build

      This command will generate a new file named <HAA_ROOT>.mtar.

    3. In the SAPCP Cockpit, in your subaccount overview, find the CF API endpoint.
    4. In the command prompt, set the CLI variable using the command: 
      cf api <api-endpoint>
    5. Log on to CF using the command: 
      cf login
    6. Deploy the mta to CF with the command: 
      cf deploy <HAA_ROOT>.mtar

      After deployment, two new services and three new applications should appear in the SAPCP Cockpit.

  4. Grant permissions and set up roles.
    1. Select the haa-java application, click Service Binding, and select the HDI service.
    2. Click Show Sensitive Data, locate the hdi_user, and copy the user ID.
    3. In the SAPCP Cockpit, access the SQL Console and run the command: 
      grant select on schema _sys_bi to <db_user>;

      Replace <db_user> with the HDI user ID you copied in the previous step.

    4. Go to the subaccount and click Role Collections.
    5. Create new role collection with the name SACToHAA.
    6. Select SACToHAA, click Add Role and select SalesApp_User from the list.
  5. Setup trust between XSUAA and the SAP HANA database container.

    Follow the instructions in SAP Note 2470084.

    In solution b) No trust has been established between XSUAA and the HANA Database, under b) SAP Cloud Platform (SAPCP), complete steps 1, 2, and 3.

  6. Setup the IdP.
    1. In the SAPCP cockpit, under Start of the navigation pathSecurity Next navigation step Trust ConfigurationEnd of the navigation path, set the default IDP as inactive.

      This ensures you won't be prompted during a data refresh.

    2. Under Custom, select the name of the Active trust configuration.
    3. Click Role Collection Assignment, and assign the SACToHAA role collection to the user ID for your SAML IdP.
  7. Map SAP HANA users to external SAML IdP users.
    1. In the SAP HANA Cockpit, select Manage users.
    2. Create a new user and give it the user ID you used in Step 6c.
    3. Scroll through the authentication area, check the JWT box.
    4. Click Add JWT Identity.
    5. Click Save.
    6. In the Authorization Mode area for the new user, click Assign Roles.
    7. Click Start of the navigation pathEdit Next navigation step AddEnd of the navigation path.
    8. Search for the access_role and the external_privileges_role defined in your HDI schema.
    9. In the Authorization Mode area for the new user, click Assign Privileges.
    10. Click Object Privileges, then Edit, and add two new objects: EXECUTE_MDS and _SYS_BI.
      Note
      If your HAA version is earlier than 1.5.2, add EXECUTE_MDS_DEV instead of EXECUTE_MDS.
  8. Add a remote system to SAP Analytics Cloud:
    1. Go to Start of the navigation path (Main Menu) Next navigation step  Connection Next navigation step Connections Next navigation step  (Add Connection)End of the navigation path.

      The Select a data source dialog will appear.

    2. Expand Connect to Live Data and select SAP HANA.
    3. In the dialog, enter a name and description for your connection.
      The connection name cannot be changed later.
    4. Set the connection type to Direct.
    5. Add your SAP HANA host name, and 443 as the port.

      The host should be the haa application route. You can find this information in the SAPCP Cockpit on the Application: haa – Overview page.

    6. (Optional) Choose a Default Language from the list.
      This language will always be used for this connection and cannot be changed by users without administrator privileges.
      Note
      You must know which languages are installed on your SAP HANA system before adding a language code. If the language code you enter is invalid, SAP Analytics Cloud will default to the language specified by your system metadata.
    7. Under Authentication Method, select SAML Single Sign On.
    8. Select OK.
      Note
      After creating a connection to a remote system and before creating a model from a remote system, you must log off and log on to SAP Analytics Cloud again.
    Note

    (Beta) Select the Enable users to schedule for story publishing option if you want to let your users schedule the publishing of stories. For details on scheduling, see Schedule a Publication.

Related Information