SAP API Management Cloud Connector PUBLIC

Transcription

1 SAP API Management Cloud Connector PUBLIC

2 Objectives After completing this unit, you will be able to: - Understand Cloud connector and its value proposition - Call an API accessible through Cloud Connector SAP SE or an SAP affiliate company. All rights reserved. Public 2

3 SAP Cloud Connector Overview

4 What is the HANA Cloud Connector SAP HANA Cloud connector serves as the link between on-demand applications in SAP HANA Cloud Platform and existing on premise systems. Runs on Premise Creates secure connection from Cloud to On Premise (without opening the firewall) Exclusively available for HCP Easy Installation and Setup Expose only the resources needed by cloud SAP SE or an SAP affiliate company. All rights reserved. Public 4

5 Hi Level Architecture SAP SE or an SAP affiliate company. All rights reserved. Public 5

6 Installation and Configuration Steps 1. Install the Cloud connector 2. Allow your Web application to access a back-end system on the intranet: Configuring HTTP access control Configuring RFC access control 3. Set up mutual authentication between the Cloud connector and a back-end system HTTP Configuration RFC Configuration 4. Connect your Web application to an on-premise system SAP SE or an SAP affiliate company. All rights reserved. Public 6

7 SAP Cloud Connector Setup Overview

8 Cloud Connector Logon name>:<secure port> Default user: Administrator pwd: manage SAP SE or an SAP affiliate company. All rights reserved. Public 8

9 Password Change You are required to change the Administrator password before continuing with the configuration SAP SE or an SAP affiliate company. All rights reserved. Public 9

10 Installation Type Choose primary installation for your initial installation. Shadow installation is for a High Availability set up SAP SE or an SAP affiliate company. All rights reserved. Public 10

11 Connection to Hana Cloud Platform The Cloud Connector starts a handshake with HCP and attempts to establish a secure SSL tunnel to the server hosting account in which your on-demand applications are running. Landscape Host: specifies the SAP HANA Cloud Platform landscape that should be used. Account Name and Account User (user/password), enter the values you obtained when you registered your account on SAP HANA Cloud Platform. HTTP Proxy: if needed to access internet from corporate network SAP SE or an SAP affiliate company. All rights reserved. Public 11

12 Connection to Hana Cloud Platform Now the connection to the Hana Cloud Platform is complete. The green icon next to Landscape Host and HTTPS Proxy indicates that they both are valid and work properly. The next step is to connect to the backend system SAP SE or an SAP affiliate company. All rights reserved. Public 12

13 Backend Connection

14 Connecting to the Backend system To allow your on-demand applications to access a certain back-end system on the intranet, you need to insert an extra line into the Cloud connector access control management. To do this, go to the Access Control tab page and choose Add SAP SE or an SAP affiliate company. All rights reserved. Public 14

15 Connecting to the Backend system Virtual Host: The host name exactly as it is specified as the URL property in the HTTP destination configuration in SAP HANA Cloud. Virtual Port basically allows you to distinguish between different entry points of your back-end system. Internal Host and Port: Specifies the actual host and Port where the target system can be reached within the intranet. If you leave the Internal Host parameters blank, the Cloud connector will try to forward the request to the network address specified by the virtual host and port Protocol: Specifies whether the Cloud connector should use HTTP or HTTPS for the connection to the back-end system. Principal Type: Defines what kind of principal is used when configuring a destination on the cloud side using this system mapping with authentication type Principal Propagation. Back-end Type: Select the description that best matches the addressed back-end system SAP SE or an SAP affiliate company. All rights reserved. Public 15

16 Configuring Resource Accessibility SAP SE or an SAP affiliate company. All rights reserved. Public 16

17 Limiting resource access In addition to allowing access to a particular host and port, you also need to specify which URL paths (Resources) are allowed to be invoked on that host. The Cloud connector uses very strict white-lists for its access control, so only those URLs for which you explicitly granted access are allowed. All other HTTP(S) requests are denied by the Cloud connector. The Cloud connector checks that the path part of the URL is exactly as specified in the configuration. If it is not, the request is denied. If you select option Path and all sub-paths, the Cloud connector allows all requests for which the URL path begins with the specified string. The Enabled checkbox allows you to specify, whether that resource shall initially be enabled or disabled SAP SE or an SAP affiliate company. All rights reserved. Public 17

18 SAP API Management Setup

19 API Management Setup To use Cloud Connector a API Provider is required The On-Premise flag needs to be selected Host and port are virtual host/port from cloud connector configuration SAP SE or an SAP affiliate company. All rights reserved. Public 19

20 Cloud Connector SAP SE or an SAP affiliate company. All rights reserved. Public 20

21 Thank you.