SAP S/4HANA Cloud Prerequisites

[#1]

• Overview
• Create Communication User
• Create Communication System
• Create Communication Arrangement
• Role Data Export

Overview

This document provides the details on the creation of the Communication User, Communication System, and Communication Arrangement on the SAP system and exporting Role Data for: 

• SAP S/4HANA Cloud source 
• SailPoint IdentityIQ for SAP S/4HANA Cloud

Create Communication User

A Communication User is a user defined in the SAP S/4HANA Cloud system for inbound communication and processing messages in the system. 

1. Login as an administrator to the SAP S/4HANA Cloud system.  In the Communication Management panel, select Maintain Communication Users.
   A list of exiting communication users page is displayed.
2. To create a new communication user click the New button.
3. Enter the following details and click Create:
   • User Name*
   • Description*
   • Password

Note the details of the User Name and Password used above.

Create Communication System

A Communication system is defined in the SAP S/4HANA Cloud system as a target system. Communication Systems must be created for inbound and outbound communication.

1. Login as an administrator to the SAP S/4HANA Cloud system. In the Communication Management panel, select Communication Systems.
   A list of exiting communication systems page is displayed.
   
2. To create a new communication system, click the New button.
3. Enter the following details, and click Create:
   • System ID*
   • System Name*
4. For inbound communication, perform the following:
   1. Enter the details for Host Name*.
   2. In the User for Inbound Communication panel, click Add (+) to add a new user.
   3. Select an Authentication Method from the drop down, specify a relevant User Name, and click OK. 
5. For outbound communication, perform the following:
   1. In the User for Outbound Communication panel, select an Authentication Method from the drop down and specify User Name and Password.
   2. Click Create.
6. Click Save to complete the creation of communication system.

Create Communication Arrangement

Communication Arrangement is defined in the SAP S/4HANA Cloud system to enable key users to create and edit communication arrangement that are set up with a communication partner.  

1. Login as an administrator to the SAP S/4HANA Cloud system. In the Communication Management panel select Communication Arrangements.
   A list of exiting communication arrangements page is displayed.
   
2. To create a new communication arrangement click the New button.
3. Enter the following details and click on Create:
   • Scenario*
     The Scenario ID is SAP_COM_0093.
   • Arrangement Name
4. Select the ID of the Communication System* and enter other details.
5. Click Save to complete the creation of a communication arrangement for a SAP_COM_0093 scenario.
   

Obtaining the URL Details 

The existing list of Communication Arrangements page is updated to include the newly created communication arrangement for SAP_COM_0093 scenario as explained above. 

To obtain the URL details, perform the following:

1. Click the newly created communication arrangement with Scenario ID SAP_COM_0093.
2. Details of the SAP_COM_0093 communication arrangement are displayed.
3. Under the Inbound Services section, copy the URL mentioned in Service URL/Service Instance.

Role Data Export

The SAP S/4HANA Cloud Source/Connector has the following respective fields in the UI:

• (For IdentityNow) Role Details File Name: Enter the name of the file that has the exported details of the roles.
• (For IdentityIQ) Role Details File Path: Enter the CSV file path.

You can use methods as per your requirement to export the role data that is consistent with the API data.

Following are the procedure examples for:

• Windows OS  (Microsoft Excel)
• Mac OS (Microsoft Excel)

Role Data for Windows OS

The SAP S/4HANA Cloud Source/Connector has the following respective fields in the UI:

• (For IdentityNow) Role Details File Name: Enter the name of the file that has the details of roles exported for the Windows OS.
• (For IdentityIQ) Role Details File Path: Enter the CSV file path

Steps for a Business user with SAP_CORE_BC_IAM_RM Permission Business Catalogs:

1. Login to S/4 HANA cloud tenant.
2. Execute the following query to export result in JSON format:
   https://<hostname>/sap/opu/odata/sap/APS_IAM_BRT_SRV/aps_iam_brt_br?sap-client=100&$format=json&$select=UUID,ID
   
   NOTE: You can add the more fields to the above URL, separated by commas, to get the dates. Available fields are UUID, TemplateID, LongText, Description, ID, ChangedOn, DifferFromTemplate, and BusinessCatalogAssignmentCount. 
   
   
3. Save the response in a .json file.
4. Open Microsoft excel and click Data.
5. Click Get Data ==> From JSON.
6. Browse and select the previously saved .json file.
7. Click Record.
   
   
   
   
8. Click List.
   
   
   
   
9. Right click List, select To Table.
   
   
   
   
10. Click OK.
    
    
    
    
11. Click Column.
    
    
    
    
12. Uncheck the check boxes for the columns that are not required and click OK.
    
    
    
    
13. Verify that the selected column values are rendered. Click Close & Load.
    
    
    
    
14. Rename the UUID column to Business Role UUID and the ID Column to Business Role ID.

1. Click  File ==> Save As, enter the file name, and select the .csv format for the file type.

Role Data for Mac OS

The SAP S/4HANA Cloud Source/Connector has the following respective field in the UI:

• (For IdentityNow) Role Details File Name: enter the name of the file that has the details of roles exported for the Mac OS
• (For IdentityIQ) Role Details File Path: enter the CSV file path

Steps for a Business user with SAP_CORE_BC_IAM_RM Permission Business Catalogs:

1. Login to S/4HANA Cloud tenant.
2. Execute the following query to export result in JSON format:
   
   https://<hostname>/sap/opu/odata/sap/APS_IAM_BRT_SRV/aps_iam_brt_br?sap-client=100&$format=json&$sel...
   
   NOTE: You can add the more fields to the above URL with comma separated to get the dates. Available fields are UUID, TemplateID, LongText, Description, ID, ChangedOn, DifferFromTemplate, BusinessCatalogAssignmentCount. 
   
   
3. On Mac OS, open Microsoft excel for Mac ( Licence: Office 356 Subscription/ Version 16.32 ).
4. In the Excel menu, navigate to Insert > Add-ins > Get Add-ins.
   
   
   
   
5. Search for the JSON to Excel add-in and click Add.
   
   
   
   
6. Click the JSON to CSV icon.
   
   
   
   
7. Copy the API response JSON and paste it into the Paste your JSON here box.
   
   
   
   
8. Click Convert to see the data loaded in the sheet.
   
   
   
   
9. Delete the first three columns and rename the UUID column to Business Role UUID and the ID Column to Business Role ID.
   
   
   
   
10. Go to File > Save as and save the file in .csv format.