S/4HANA Connection with SAC (SAP Analytics Cloud) using cors

Overview

This blog post will explain how to connect SAC (SAP Analytics Cloud) with S/4HANA. Below diagram shows architecture layout.

(reference from help.sap.com)

Prerequisites

Ensure that the InA package (/sap/bw/ina/service/v2) or a higher-level package on your SAP NetWeaver system is configured for basic authentication..

Note
To check if the Ina package is enabled, open the following URL in your browser: https://<Your_ABAP_System>/sap/bw/ina/GetServerInfo?sap-client=<Your_Client_ID>. Make sure you are prompted for user credentions, and after login you get a JSON response. Replace <Your_ABAP_System> with your ABAP system host, and <Your_Client_ID> with your SAP client ID.

Procedure

Configure Cross-Origin Resource Sharing (CORS) support on your SAP NetWeaver system.

If you are using SAP NetWeaver version 7.52 or above, you must apply SAP Note 2531811 or import ABAP 7.52 SP1 to fix CORS related issues in SAP NetWeaver, and then follow the steps below.

a. Immediately enable CORS in your system parameters without restarting SAP NetWeaver.

These changes will disappear after a restart of your SAP NetWeaver system.

1. Enter transaction code: RZ11.
2. Enter Parameter: icf/cors_enabled
3. Select Display.
4. Set Value to 1.

b. Permanently enable CORS in your system parameters.

1. Enter transaction code: rz10
2. In Profile, choose DEFAULT from the list.
3. Select Extended Maintenance.
4. Click Change.
5. Click Parameter  Create.
6. icf/cors_enabled.
7. Set the parameter value to 1.
8. Click Exit and Set the parameter name to Yes to save.
9. Click Profile | Save.
10. Click Yes to activate.
11. Click Continue.
12. Click Exit and Yes to log off.
13. Restart SAP Netweaver for the changes to take effect.

c. Add SAP Analytics Cloud (SAC) to the HTTP whitelist.

1. Enter transaction code: /NUCONCOCKPIT.
2. Change Scenario to HTTP Whitelist Scenario.
3. Change the Mode of Cross-origin Resource Sharing to Active Check.
4. Double-click Cross-origin Resource Sharing.
5. Select the Display/Change icon.
6. Under Whitelist, select the Add icon, and in the Input Window, add the following information:

• Service Path: Add /sap/bw/ina.
• Host rule: Add your SAP Analytics CloudSet the parameter name to host. For example, mytenant.us1.sapbusinessobjects.cloud.
• Allowed Methods: Select GET, HEAD, POST, and OPTIONS.
• Add the following to Allowed Headers:

x-csrf-token,content-type,x-sap-cid,mysapsso2,authorization,accept-language

• Add the following to Exposed Headers:

x-csrf-token,sap-rewriteurl,sap-url-session-id

• Allow Credentials: Ensure this is selected.

d. Save this information.

Verify end-users’ web browser configuration and access.

Your end users’ web browsers must be configured to:

• Allow pop-up windows from the SAP Analytics Cloud domain: [*.]sapbusinessobjects.cloud.
• Allow 3rd party cookies from the SAP S/4HANA server’s domain or the domain of your reverse proxy. For example, in Internet Explorer 11, go to Internet Options  Security  Trusted Sites, add your domain name, then select Enable Protected Mode.

Add a remote system to SAP Analytics Cloud:

1. Go to (Main Menu)   Connection  Connections   (Add Connection)

   The Select a datasource dialog will appear.

2. Expand Connect to Live Data and select SAP S/4HANA.
3. In the dialog, enter a name and description for your connection.
   The connection name cannot be changed later.
4. Set the connection type to Direct.
5. Add your SAP S/4HANA host name, HTTPS port, and Client.
6. (Optional) Choose a Default Language from the list.
   This language will always be used for this connection and cannot be changed by users without administrator privileges.

   You must know which languages are installed on your SAP S/4HANA system before adding a language code. If the language code you enter is invalid, SAP Analytics Cloud will default to the language specified by your system metadata.

7. Under Authentication Method select User Name and Password.
8. Enter an SAP S/4HANA user name and password.
9. Select OK.

Known Issue

You may see error as below after doing all configuration, if ssl is not configured for S/4HANA system.

Solution – You have to configure SSL for S/4HANA system using this blog post

Conclusion

The connection is saved. Only the user whose credentials you added will have access to the live data connection.