Configuration of Cloud Connector

Setting Up the Cloud Connector

This section shows the necessary configuration steps for setting up the Cloud Connector.

Configuration Steps
Step Configuration Activity Description
1 Start Cloud Connector

Open the Cloud Connector and log on for the first time.

2 Define Subaccount

Define subaccount and user data. A subaccount user is needed for establishing the connection between the SAP BTP subaccount and the Cloud Connector.

3 Mapping Virtual to Internal System

In this step you define a virtual system that addresses the endpoint of the host for the cloud services running on the PCo installation. This service enables the communication between PCo and the Cloud Connector.

4 Add Accessible Resources In this step you specify the resources that are accessible from the cloud. Additionally, you can specify the access authorizations for the resources of the endpoint, for example, authorization for creating a service provider.
5 Configure Trust in the Cloud Connector for PCo

In this step you have to create and upload the certificate for the host for the cloud services.e.

6 Configure System Certificate

In this step you configure the system certificate of the Cloud Connector (client certificate). In order that a secure connection can be established, the system certificate of the Cloud Connector needs to be trusted by PCo.

7 Configure Principal Propagation

In this step you configure a certificate for principal propagation needed for checking user data. This certificate is sent when the Cloud Connector is calling PCo using HTTPS. It contains the e-mail address of the user.

Principal propagation is not needed if you want to configure user groups for authorization management. (See also: Maintaining User Groups (in DMC))

8 Cloud Connector System Certificate Trust In order that a secure connection can be established, the system certificate of the Cloud Connector needs to be trusted by PCo. Depending on whether the system certificate is a self-signed certificate or a certificate signed by a certificate authority (CA), you proceed slightly differently.