S/4HANA Connection with SAC (SAP Analytics Cloud) using cors
This blog post will explain how to connect SAC (SAP Analytics Cloud) with S/4HANA. Below diagram shows architecture layout.
(reference from help.sap.com)
Ensure that the InA package (/sap/bw/ina/service/v2) or a higher-level package on your SAP NetWeaver system is configured for basic authentication..
Note To check if the Ina package is enabled, open the following URL in your browser: https://<Your_ABAP_System>/sap/bw/ina/GetServerInfo?sap-client=<Your_Client_ID>. Make sure you are prompted for user credentions, and after login you get a JSON response. Replace <Your_ABAP_System> with your ABAP system host, and <Your_Client_ID> with your SAP client ID.
Configure Cross-Origin Resource Sharing (CORS) support on your SAP NetWeaver system.
If you are using SAP NetWeaver version 7.52 or above, you must apply SAP Note 2531811 or import ABAP 7.52 SP1 to fix CORS related issues in SAP NetWeaver, and then follow the steps below.
a. Immediately enable CORS in your system parameters without restarting SAP NetWeaver.
These changes will disappear after a restart of your SAP NetWeaver system.
- Enter transaction code: RZ11.
- Enter Parameter: icf/cors_enabled
- Select Display.
- Set Value to 1.
b. Permanently enable CORS in your system parameters.
- Enter transaction code: rz10
- In Profile, choose DEFAULT from the list.
- Select Extended Maintenance.
- Click Change.
- Click .
- Set the parameter value to 1.
- Click Exit and Set the parameter name to Yes to save.
- Click Profile | Save.
- Click Yes to activate.
- Click Continue.
- Click Exit and Yes to log off.
- Restart SAP Netweaver for the changes to take effect.
c. Add SAP Analytics Cloud (SAC) to the HTTP whitelist.
- Enter transaction code: /NUCONCOCKPIT.
- Change Scenario to HTTP Whitelist Scenario.
- Change the Mode of Cross-origin Resource Sharing to Active Check.
- Double-click Cross-origin Resource Sharing.
- Select the Display/Change icon.
- Under Whitelist, select the Add icon, and in the Input Window, add the following information:
- Service Path: Add /sap/bw/ina.
- Host rule: Add your SAP Analytics CloudSet the parameter name to host. For example, mytenant.us1.sapbusinessobjects.cloud.
- Allowed Methods: Select GET, HEAD, POST, and OPTIONS.
- Add the following to Allowed Headers:
- Add the following to Exposed Headers:
- Allow Credentials: Ensure this is selected.
d. Save this information.
Verify end-users’ web browser configuration and access.
Your end users’ web browsers must be configured to:
- Allow pop-up windows from the SAP Analytics Cloud domain: [*.]sapbusinessobjects.cloud.
- Allow 3rd party cookies from the SAP S/4HANA server’s domain or the domain of your reverse proxy. For example, in Internet Explorer 11, go to , add your domain name, then select Enable Protected Mode.
Add a remote system to SAP Analytics Cloud:
- Go to
The Select a datasource dialog will appear.
- Expand Connect to Live Data and select SAP S/4HANA.
- In the dialog, enter a name and description for your connection.
The connection name cannot be changed later.
- Set the connection type to Direct.
- Add your SAP S/4HANA host name, HTTPS port, and Client.
- (Optional) Choose a Default Language from the list.
This language will always be used for this connection and cannot be changed by users without administrator privileges.
You must know which languages are installed on your SAP S/4HANA system before adding a language code. If the language code you enter is invalid, SAP Analytics Cloud will default to the language specified by your system metadata.
- Under Authentication Method select User Name and Password.
- Enter an SAP S/4HANA user name and password.
- Select OK.
You may see error as below after doing all configuration, if ssl is not configured for S/4HANA system.
Solution – You have to configure SSL for S/4HANA system using this blog post
The connection is saved. Only the user whose credentials you added will have access to the live data connection.
great stuff, much obliged!
We want to connect our SAP BO Cloud to S4HANA on premise system through Live using CORS or Via Reverse Proxy.
Kindly suggest prerequisite configuration for of live connection to S4hana on premise.
We are stuck right now.no solution working.
Thanks for this - S/4HANA is specifically mentioned but does this also apply to SAP Business Suite systems? Just checking.
We have not tried it. However we have connected BW on Oracle to SAC.
So fundamentally, you can connect Business Suites also.
did you manage to connect it to your Business Suite system? - I'm very curious.
Best regards, Laszlo
Thanks for the detailed explanation kundan
But I have one query is this live connections with core is configured only in SAP netweaver systems or S4HANA abap stack systems?
What are the permissions needed for the S4/HANA user?
What is the procedure when S/4 HANA system is HEC-based?
Thank you! Helped me resolve connectivity issue with SAML Authentication.
Can you please let me know in detials that how to connect SAP S/4 HANA rise with SAP 2020 with SAC trial offer?
thank youin advance
Muhammad Ali Awan
In my view, its a same procedure which has been mentioned the in blog. Please let me know - if you are getting any error.
Hello and thank you for the great blog post!
I was able to configure CORS and create the Live Data Connection to our on-premise S4HANA system by following your post (and also to a secondary NW 7.52 system we have).
However on SAC I can't use this Live Data Connection to build anything such as a Dataset or Model.
Datasets: Only provide me the Live Data option to SAP HANA (not S4HANA)
Modeler: Only provides options for HANA, BW, BPC and SAP Universe.
Also tried other things such as Analytical Applications, Data Analyzer, etc. The type of connection I created does not show as a data source option for any of those.
So, my question is. What is the purpose of this type of connection withn SAC? What kind of Analytics resources should be able to consume this connection?