Set Up Trust Between SAP Analytics Cloud and Your On-Premise HANA Systems Using a Tunnel Connection

Configure your on-premise SAP HANA system so that it trusts SAP Analytics Cloud. This step is needed only if your live connection uses single sign-on.

Prerequisites

Note
Make sure that you've already configured the Cloud Connector. For details, see Configure Your On-Premise Systems to Use the Cloud Connector.

Context

  • The Cloud Connector maps to the SAP HANA system using no authentication.
  • The live system needs to trust the metadata that is downloaded from SAP Analytics Cloud.

Procedure

  1. In the SAP HANA XS Administration Tool, go to Start of the navigation path (menu) Next navigation step XS Artifact AdministrationEnd of the navigation path .
  2. In the Packages area, select Start of the navigation pathsap Next navigation step bc Next navigation step ina Next navigation step service Next navigation step v2End of the navigation path.

    The SAP Security and Admin page appears.

  3. Select Edit.
  4. Select the SAML checkbox if it is not already enabled.
  5. In the SAP HANA XS Administration Tool, go to Start of the navigation path (menu) Next navigation step SAML Service ProviderEnd of the navigation path .
  6. Under Service Provider Information, copy the name of the SAML service provider. Later, you will need to add the SAML Provider Name to the SAP Analytics Cloud live connection dialog.
  7. In SAP Analytics Cloud, start to create a live SAP HANA connection and enable single sign-on. Select Download Metadata and save the metadata file.
  8. In the SAP HANA XS Administration Tool, go to Start of the navigation path (menu) Next navigation step SAML Identity ProviderEnd of the navigation path and select (Add) near the bottom of the screen to add a new SAML IdP.
  9. Open the metadata file you downloaded and copy the contents into the Metadata input area. Save the changes.
  10. You must either perform an automatic or manual user mapping:
    • If you are using the same IdP for SAP HANA and SAP Analytics Cloud, you can automatically map all existing users to SAP Analytics Cloud.
    • If you use different IdPs for SAP HANA and SAP Analytics Cloud, you must perform a manual user mapping.
Related Information