Skip to Content
Technical Articles
Author's profile photo Jamie Cawley

SAP C/4HANA Extensibility – Provisioning Kyma on Azure

NOTE: As detailed in this blog, this functionality to provision Kyma will be removed from the SAP C/4HANA cockpit and be replaced by the SAP Cloud Platform Extension Factory, Kyma runtime.  For more information about the SAP Cloud Platform Extension Factory, Kyma runtime see “Get a fully managed runtime based on Kyma and Kubernetes” and “How to get started”.


The recent evolution of the SAP C/4HANA Cockpit now includes the ability to provision Kyma on Microsoft Azure.  This blog details the steps necessary to create the access credentials required to perform the provisioning.  Before continuing, make sure you have access to the Extensibility menu of the SAP C/4HANA Cockpit.  If you experience any issues accessing the cockpit refer to the help.  You will also need to be assigned the Administrator role to complete these tasks, details in the help.

Microsoft Azure – Configuration

Open the Microsoft Azure Portal using the link

After signing in, choose the menu option Azure Active Directory and then choose App registrations.  Choose the option to create a New registration

NOTE: These steps will not work on a free trial and will require you to upgrade to a paid subscription type.  If you start with a free trial, upgrading your account to a Pay-As-You-Go should keep your credit active until expiration.  It may also require a quota increase for the Compute-VM (cores-vCPUs) for the DSv2 SKU Series to a new limit of 12 in the Location you plan on deploying to.  This can be requested as a New support request in the Help & Support menu area.

Provide a value for the Name and verify that Web is selected for the Redirect URI (optional) option.  Choose the Register button to create the application service principal.

With the application created, you will be presented some identifiers that are needed in the SAP C/4HANA Cockpit when creating the Cloud Provider Access Credentials.  Both the Application (client) ID and the Directory (tenant) ID will be required, make a note of these values.

Choose the Certificates & secrets menu option and then choose the option to create a New client secret.

Provide a value for the Description and choose the Add button to generate a new secret for the registered application (service principal).

Ensure to copy the secret immediately after generating, as the value will be masked as soon as you navigate away from Certificates & secrets.  This will be needed when creating the Cloud Provider Access Credentials in the SAP C/4HANA Cockpit

Choose the Home menu option and then choose your subscription

Copy the value of the Subscription ID, this will also be needed when creating the Cloud Provider Access Credentials in the SAP C/4HANA Cockpit

Next choose the Access control (IAM) menu option and then the choose the Add a role assignment.

Add the Contributor role by choosing Contributor from the Role dropdown and then search for the application by using the Select field and then choose the application to add the entry to the Selected members list.  Save your changes.

Within the Subscription view choose the Resource providers option by either scrolling the menu or by using the search bar as shown in the screenshot.  Within the resource providers window use the search to search for compute.  Choose the entry Microsoft.Compute and finally use the Register button to register the provider.  Do the same for

  • Microsoft.ContainerService
  • Microsoft.Network
  • Microsoft.Storage

It may take a few minutes for each resource to complete its registration process.  Please verify that all four resource registration processes have completed before proceeding.

In the SAP C/4HANA Cockpit choose the Extensibility menu option and then choose the Add button to add a Cloud Provider Access Credential.

Provide a Name and Choose the Provider Microsoft Azure.  Copy the values generated from the previous steps into the appropriate fields and choose the Add button.

With the Credentials configured you can now provision a Kyma runtime by choosing the Provision a runtime button.

Then provide the desired values for your new runtime and finally choose Provision.

This will initiate the provisioning process which will take some time to complete. Once the provisioning completes the status will change to PROVISIONED and you will then be able to open the Kyma Console.

If you are interested in connecting SAP Commerce Cloud check out this blog, otherwise you can utilize a Mock Application to continue your learning which is detailed in this blog.

Assigned Tags

      You must be Logged on to comment or reply to a post.
      Author's profile photo Prashanth Rai
      Prashanth Rai

      Hi Jamie,

      Thanks for the detailed explanation of the steps carried out to provision kyma on Azure. I was able to provision Kyma on Azure based on the steps mentioned. However I'm facing issues while launching the Kyma Console - which navigates to the URL -


      This looks like a generic URL which then forwards me to SAP Cloud Identity provider

      When I login using my cloud identity user it authenticates me, but keeps refreshing and the Kyma console never comes up.  Any help to resolve this would be of great help.




      Author's profile photo Jamie Cawley
      Jamie Cawley
      Blog Post Author

      Hi Prashanth,

      Please open a ticket under the CEC-C4F component or post a new thread in the questions and answers to address the issue.  Seems you cluster may have not started successfully, you could try provisioning a new one in the meantime.



      Author's profile photo Prashanth Rai
      Prashanth Rai

      Thanks Jamie. tried provisioning a new one and still facing the same issue. I have opened an incident.

      Best Regards,