Live Data Connection to SAP HANA 2.0 on SAPCP Cloud Foundry (With HDI Containers)
To access SAP HANA HDI containers on a SAP Cloud Platform (SAPCP) system that is running a Cloud Foundry (CF) environment, you can create a live data connection using the SAP HANA Analytics Adapter for Cloud Foundry.
- SAP HANA 2.0 must be installed on a SAP Cloud Platform (SAPCP) system that uses a Cloud Foundry (CF) environment.
A SAML 2 Identity Provider (IdP) must be configured. Both the SAPCP and SAP Analytics Cloud must use the same IDP.
For how to set up SAML 2.0 on the SAPCP, see Trust and Federation with SAML 2.0 Identity Providers.
For how to set up SAML in SAP Analytics Cloud, see Enabling a Custom SAML Identity Provider.
- You must have HDI containers available on your SAPCP system. For more information, see Set Up an HDI Container.
Install and configure tools.
- Download and install the Cloud Foundry CLI.
Download and install the Cloud Foundry CLI MTA.
Install the plugin using the command:
cf install-plugin mta-plugin-windows.exe -f
Download and install Oracle JDK 8 or SAP JDK 8.
To verify that the JDK is ready, check the version of the JDK you have installed. For example:
Download and install Apache Maven.
To verify that Maven is ready, check the version of Maven you have installed. For example:
Download and install Node.js.
To verify that Node is ready, check the version of Node you have installed. For example:
node --versionAlso verify that npm (Node Package Manager) is installed with Node. For example:
Set npm for the sap registry modules with the command:
npm config set @sap:registry https://npm.sap.com
Deploy the analytics adapter for SAP HANA.
Create a local folder. For example: c:\haa.
This directory is referred to as <HAA_ROOT> in the following steps.
- Download or clone the analytics adapter (HAA) project from SAP GitHub.
- Unzip the file in the <HAA_ROOT>.
- Create a local folder. For example: c:\haa.
Build and deploy the analytics adapter.
- Start a command prompt window.
Build the mta file with the command:
java -jar mta.jar --build-target=CF build
This command will generate a new file named <HAA_ROOT>.mtar.
- In the SAPCP Cockpit, in your subaccount overview, find the CF API endpoint.
In the command prompt, set the CLI variable using the command:
cf api <api-endpoint>
Log on to CF using the command:
Deploy the mta to CF with the command:
cf deploy <HAA_ROOT>.mtar
After deployment, two new services and three new applications should appear in the SAPCP Cockpit.
Grant permissions and set up roles.
- Select the haa-java application, click Service Binding, and select the HDI service.
- Click Show Sensitive Data, locate the hdi_user, and copy the user ID.
In the SAPCP Cockpit, access the SQL Console and run the command:
grant select on schema _sys_bi to <db_user>;
Replace <db_user> with the HDI user ID you copied in the previous step.
- Go to the subaccount and click Role Collections.
- Create new role collection with the name SACToHAA.
- Select SACToHAA, click Add Role and select SalesApp_User from the list.
Setup trust between XSUAA and the SAP HANA database container.
Follow the instructions in SAP Note 2470084.
In solution b) No trust has been established between XSUAA and the HANA Database, under b) SAP Cloud Platform (SAPCP), complete steps 1, 2, and 3.
Setup the IdP.
In the SAPCP cockpit, under
, set the default IDP as inactive.
This ensures you won't be prompted during a data refresh.
- Under Custom, select the name of the Active trust configuration.
- Click Role Collection Assignment, and assign the SACToHAA role collection to the user ID for your SAML IdP.
- In the SAPCP cockpit, under , set the default IDP as inactive.
Map SAP HANA users to external SAML IdP users.
- In the SAP HANA Cockpit, select Manage users.
- Create a new user and give it the user ID you used in Step 6c.
- Scroll through the authentication area, check the JWT box.
- Click Add JWT Identity.
- Click Save.
- In the Authorization Mode area for the new user, click Assign Roles.
- Click .
- Search for the access_role and the external_privileges_role defined in your HDI schema.
- In the Authorization Mode area for the new user, click Assign Privileges.
Click Object Privileges, then Edit, and add
two new objects: EXECUTE_MDS and
NoteIf your HAA version is earlier than 1.5.2, add EXECUTE_MDS_DEV instead of EXECUTE_MDS.
Add a remote system to SAP Analytics Cloud:
The Select a data source dialog will appear.
- Expand Connect to Live Data and select SAP HANA.
In the dialog, enter a name and description for your connection.
The connection name cannot be changed later.
- Set the connection type to Direct.
Add your SAP HANA host name, and 443 as the port.
The host should be the haa application route. You can find this information in the SAPCP Cockpit on the Application: haa – Overview page.
(Optional) Choose a Default Language from the
list.This language will always be used for this connection and cannot be changed by users without administrator privileges.NoteYou must know which languages are installed on your SAP HANA system before adding a language code. If the language code you enter is invalid, SAP Analytics Cloud will default to the language specified by your system metadata.
- Under Authentication Method, select SAML Single Sign On.
NoteAfter creating a connection to a remote system and before creating a model from a remote system, you must log off and log on to SAP Analytics Cloud again.
(Beta) Select the Enable users to schedule for story publishing option if you want to let your users schedule the publishing of stories. For details on scheduling, see Schedule a Publication.
- Go to .