This blog post describes step by step how to configure OAuth 2.0 between your SAP Datasphere tenant and SAP BI Platform; then how to create OLAP connections to SAP Datasphere in SAP BusinessObjects BI, and finally how to consume SAP Datasphere analytic models in SAP Web Intelligence documents.
Prerequisites:
- SAP Datasphere tenant
- SAP BusinessObjects BI Platform tenant, version 4.3 SP04 or greater
- SAP BusinessObjects Web Intelligence and Information Design Tool as SAP BI tools
Step 1: Create an OAuth Client in SAP Datasphere
In Datasphere part, to configure OAuth 2.0 between your SAP Datasphere tenant and your SAP BI Platform, the first step is to create an OAuth Client in which your SAP BI Platform tenant should be referred to receive OAuth tokens. The workflow for creating this OAuth Client in SAP Datasphere is as following:
- Log into your SAP Datasphere tenant as administrator
- Go to System > Administration > App Integration
- Under OAuth Clients > Configured Clients, select Add a New OAuth Client
4. In the dialog, type a Name for the OAuth Client
5. For the Purpose field, select the Interactive Usage option from the list. Note that this option allows accessing protected resources with a valid SAML-based user context.
6. Enter the Redirect URI to specify where OAuth access and refresh tokens are returned in SAP BI Platform. Note that, in SAP BI, OAuth access and refresh tokens are saved and managed per user at the SAP BI Platform level. So, SAP BI platform provides a callback URL allowing to retrieve the OAuth tokens from authorization servers. This callback URL should set as Redirect URI under the following format: https://*<host>[:<port>]*/biprws/v1/oauth2/callback
7. Select Add to create the OAuth Client
Once the OAuth Client is created, an OAuth Client ID and Secret are generated. You must provide this latter information to your SAP BI Platform, in addition to the following ones:
- Authorization URL, information available in the OAuth Clients section of the App Integration page
- Token URL, information available in the OAuth Clients section of the App Integration page
Step 2: Create an Authorization Server Configuration in SAP BI Platform
Once the OAuth Client is created in your SAP Datasphere tenant, you must provide the received OAuth information to your SAP BI Platform tenant by creating an Authorization Server Configuration. In SAP BusinessObjects BI, an Authorization Server Configuration allows to describe and manage an external authorization server in order to get or validate the access and refresh tokens. To create an Authorization Server Configuration in SAP BI Platform for your SAP Datasphere used here as your OAuth authorization server, the workflow is as following:
- Log into your SAP BI Central Management Console as administrator
- select Applications > Authorization Server Configuration
- Under the Manage column, select Authorization Server Configurations
- In the dialog, select New Authorization Server Configuration under the Manage column.
5. In the dialog, type a unique name as Reference Name for the configuration. Note that this Reference Name is used to identify the configuration in different workflows for achieving authorization based SSO.
6. For the Authorization Endpoint field, type the Authorization URL provided by your SAP Datasphere tenant as described in step 1.
7. For the Token Endpoint field, type the Token URL provided by your SAP Datasphere tenant as described in step 1.
8. For the Client ID field, type the OAuth Client ID provided by the OAuth Client registered in your SAP Datasphere tenant in step 1.
9. For the Client Secret field, type the OAuth Client Secret provided by the OAuth Client registered in your SAP Datasphere tenant in step 1.
10. For the Redirect URL field, type the same Redirect URI used in the OAuth Client registered in your SAP Datasphere tenant in step 1.
11. For the Authorization Scope field, type openid uaa.user
12. For the Type of Resource field, select the Agnostic option from the list.
13. Select OK to validate the details and create the configuration.
Once created, the OAuth 2.0 configuration between your SAP Datasphere tenant and your SAP BI Platform is complete. The Authorization Server Configuration will be saved in SAP BI Platform as a system object with type Authorization Reference that you can then use and refer in authorization scenarios in using its Reference Name.
Step 3: Create an SAP BI OLAP connection to SAP Datasphere
Once OAuth 2.0 is configured between your SAP Datasphere tenant and your SAP BI Platform, you must now create an SAP BI OLAP connection to SAP Datasphere to allow SAP BI tools such as Web Intelligence to connect to your SAP Datasphere tenant. In SAP BI Platform, you have two options to create an SAP BI OLAP connection to SAP Datasphere: The first is to use Information Design Tool. The second option is to use Central Management Console. We will look at both options:
Option 1: Create SAP Datasphere OLAP Connection via Information Design Tool
1. Open Information Design Tool
2. Go to the Repository Resources and select Insert Session
3. Log into your SAP BI Platform tenant as administrator
4. Under the Connections folder, select Insert OLAP Connection
5. In the wizard, type a name as Resource Name for the OLAP connection.
6. On next window, select SAP > SAP Datasphere as OLAP middleware driver.
7. In the dialog for connection properties, select the Use Single Sign On With OAuth 2.0 option as Authentication Mode
8. For the Authorization Reference field, select the configuration created in SAP BI Platform in step 2.
9. For the Host Name field, type the SAP Datasphere tenant URL.
10. Select Finish to create and publish the OLAP connection in SAP BI Platform
Option 2: Create SAP Datasphere OLAP Connection via Central Management Console
1. Log into your SAP BI Central Management Console
2. select OLAP Connections
3. In the dialog, select New connection in the toolbar
4. In the connection editor, type a Name for the OLAP connection.
5. Select SAP Datasphere as Provider.
6. For the Data Source field, type the SAP Datasphere tenant URL.
7. For the Authorization Reference field, select the configuration created in SAP BI Platform in step 2.
8. For the Authentication field, select SSO.
9. Select Save to create and save the OLAP connection in SAP BI Platform
Step 4: Consume SAP Datasphere analytic models in Web Intelligence
Once the SAP Datasphere OLAP connection is created and published in SAP BI Platform, you can consume SAP Datasphere analytic models in SAP Web Intelligence as following:
1. Log into your SAP BusinessObjects BI tenant with SAP BI Launchpad
2. Open SAP BusinessObjects Web Intelligence
3. Create a new Web Intelligence document to consume a Datasphere analytic model.
4. In the Data Source Selection dialog, select SAP Datasphere as the data source type.
5. Under Connections, select the SAP Datasphere OLAP Connection created in step 3.
6. An SAP Datasphere Login dialog page opens if you have not yet logged in to your SAP Datasphere tenant. Note that, in SAP BI Launch pad, you can also directly log on your SAP Datasphere tenant from SAP BI by going to Settings > User Account > Authorization Tokens, and select the Generate button on the Authorization Reference Name created in Step 2.
7. Input your SAP Datasphere credentials and click on the Log On
8. Browse spaces and analytic models available in your SAP Datasphere tenant, and select the Datasphere analytic model you want to consume in your report.
9. Once selected your Datasphere analytic model, the Web Intelligence query panel is launched allowing you to build your query on the Datasphere analytic model.
10. In the Web Intelligence query panel, select Datasphere model hierarchies, dimensions and measures according to your business, use them as result objects or query filters, and run the query by clicking in Run.
11. Your Web Intelligence document is created with data coming from SAP Datasphere. You can enrich your BI report with charts or other Web Intelligence reporting features.
