xP&A CX Commercial Planning - Data Integration

So, let’s get started. Log on to your SAP Analytics Cloud tenant and navigate to
System -> Administration -> App Integration.

In section OAuth Clients, take a note of the Token URL.
It should be https://<your-sac-tenant>/oauth/token

Take a note of the Token URL as you will need it later.

In this step you enable the Data Export and Import Service and create the OAuth client credentials to be able to connect against the services of SAP Analytics Cloud. In section Configured Clients click on the + Add a New OAuth Client link.

• Provide a name for your client, e.g. SAC_Import
• in dropdown Purpose select option Interactive Usage and API Access
• in dropdown Access check option Data Export Service and Data Import Service

Finish the creation of the OAuth Client credentials by hitting the Add button at the bottom of the popup.

Once the client credentials have been created, take a note of the

• OAuth Client ID
• the Secret (click on Show secret to display it)

as you will need it in the next step.

You can click on the button Done to close the popup and move over to the next step.

For authentication from SAP Cloud Integration to SAP Analytics Cloud you will need to set up a OAuth2 Client Credentials artifact in SAP Cloud Integration.
The artifact will then be used in the integration flow to authenticate against SAP Analytics Cloud.

Let’s head over and logon to SAP Cloud Integration.

In SAP Cloud Integration click on the Monitor Artifacts symbol below the Burger Menu icon in the top left corner and access Integrations. Access the Manage Security tile.

Click on button Create on top of the Security Material list and choose OAuth2 Client Credentials.

• Provide a name for this security material; default name referenced in the integration flow is SACoAUTH.
• Provide a description (optional).
• In field Token Service URL enter the Token Service URL from your SAC tenant.
• In field Client enter the OAuth Client ID that has been created in the previous step.
• In field Client Secret enter the Secret that has been created in the previous step.

Click on Deploy to save the user credential artifact.

After the setup to connect SAP Analytics Cloud with SAP Cloud Integration is done, the next steps are about connecting SAP Integrated Business Planning with SAP Cloud Integration.
The artifacts that will be created in this step will later be used in the Integration Flow to authenticate against SAP Integrated Business Planning.

Let’s head over and logon to SAP Integrated Business Planning.

You need a business user with the role like SAP_BR_DEMAND_PLANNER_IBP. This role is predefined by SAP and only intended for the initial setup of a system. Please create your own business roles based on the required business role template for production use.

Remember the Business User ID as you will need it in the next step.

Open the App Maintain Communication User to create a Communication User. Please note down the Communication User ID and Password, they will be needed in the next step to access SAP Integrated Business Planning from SAP Cloud Integration. This tutorial creates Basic Access Authentication credentials for SAP Integrated Business Planning. You could also choose a different authentication method.

Assign this Communication User to the Communication System in the Communication System App.

Change to the Communication Arrangements App and create a Communication Arrangement of scenario SAP_COM_0720 with the Communication System and Communication User just created.

After this configuration you have the user and password of the Communication User for accessing SAP Cloud Integration via API. This credential needs to be stored as security material in SAP Cloud Integration. Storing the credential will be part of the next step.

For authentication from SAP Cloud Integration to SAP Integrated Business Planning you will need to set up a user credential artifact in SAP Cloud Integration.
The artifact will then be used in the Integration Flow to authenticate against SAP Integrated Business Planning.
The credential of the SAP Integrated Business Planning Communication User has been created in the last step and need to be stored in SAP Cloud Integration now.

Let’s head over and logon to SAP Cloud Integration.

In SAP Cloud Integration click on the Monitor Artifacts symbol below the Burger Menu icon in the top left corner and access Integrations. Access the Manage Security tile.

Click on button Create on top of the Security Material list and choose User Credentials.

• Provide a name for this security material. Remember this name as you will need it in the Integration Flow configuration (Step 10).
• Provide a description (optional).
• Leave the Type as User Credentials
• In field User enter the Communication User ID that has been created in the previous step.
• In field Password/ Repeat Password enter the Password that has been created in the previous step.

• Click on Deploy to save the user credential artifact.

You can now see the created item in your list of security materials. Please note down the Security Material Name, as it will be needed to customize the Integration Flows.

In an earlier step, a Communication User for SAP Integrated Business Planning has been created. With this user you can use the SAP Integrated Business Planning APIs.

A similar Communication User has to be created for SAP S/4HANA. The Integration Flows for Commercial Planning are using S/4HANA APIs to read master data from the APIs API_SALESORGANIZATION_SRV and API_SLSPRICINGCONDITIONTYPE_SRV.

Open the App Maintain Communication User to create a Communication User. This example uses Basic Authorization. Please note down the Communication User and Password, they will be needed in the next step.

Create a Communication System in the Communication System App. Assign the Communication User that was just created to this Communication System.

Change to the Communication Arrangements App and create two Communication Arrangements. One of scenario type SAP_COM_0087 for the master data and of type SAP_COM_0294 for the price service.

After this configuration you have the user and password of the Communication User for accessing SAP S/4HANA APIs. This credential needs to be stored as security material in SAP Cloud Integration. Storing the credential will be part of the next step.

For authentication from SAP Cloud Integration to SAP S/4HANA you will need to setup a user credential artifact in SAP Cloud Integration.
The artifact will then be used in the Integration Flow to authenticate against SAP S/4HANA.
The credential of the SAP S/4HANA Communication User has been created in the last step and need to be stored in SAP Cloud Integration now.

The steps are identical to how to configure Secure Material for SAP Integration Business Planning in step 5.

In SAP Cloud Integration click on the Monitor Artifacts symbol below the Burger Menu icon in the top left corner and access Integrations. Access the Manage Security tile.

Click on button Create on top of the Security Material list and choose User Credentials.

• Provide a name for this security material. Note down this name as it will be used in Step 10.
• Provide a description (optional).
• Leave the Type as User Credentials
• In field User enter the Communication User ID that has been created in the previous step.
• In field Password/ Repeat Password enter the Password that has been created in the previous step.

• Click on Deploy to save the user credential artifact.

You can now see the created item in your list of security materials. Please note down the Security Material Name, as it will be needed to customize the Integration Flows.

In the last steps, credentials in SAP Cloud Analytics and SAP Integrated Business Planning have been created. Both credentials have been stored as Security Materials in SAP Cloud Integration. This step is about how to access the Integration Flows in SAP Cloud Integration via API. Up until now you could start the Integration Flows from SAP Cloud Integration directly when changing the starter to a timer. But in the target architecture the Integration Flows should be started from SAP Analytics Cloud via API. For this approach credentials are required which will be created in this step.

You need to create a Service Instance and a Service Key for Inbound Authentication in your Process Integration Runtime of your BTP account. This step describes how to setup a Process Integration Runtime to create the Service Key.

The following steps are required prerequisites for this step, but outside the scope of this tutorial:
- set up BTP in general
- set up the Integration Suite with its capabilities in particular

Login to your BTP account and navigate to the Service Marketplace of your sub account.

Click Create on the Process Integration Runtime tile.

In the pop-up choose integration-flow in the combo box for Plan and populate the other fields depending on your BTP setup. Once complete, click “Next” at the bottom of the pop-up to continue.

You can keep the standard role ESBMessaging.send or enter a custom role.

Review the settings click Create and wait until the Service Instance is created.

Based on the Process Integration Runtime Service instance we will create the OAuth Service Key. In your Service Marketplace click again on the Process Integration Runtime tile, but choose Instance and Subscriptions instead of Create.

Click on Create Service Key for your instance.

Give your key a name and choose Clientid/Secret for the Key Type. Click Create to close the dialog and start the key generation.

You can access the Service Key by navigating to your sub account into the instance section. Here you should find the Service Instance with your generated Service Key.

You need to note down the clientid, clientsecret and tokenurl.
This information will be needed later in an SAP Analytic Cloud connection so that the Integration Flows can be triggered via API from SAP Analytics Cloud.

After all authorizations have been set up it is time to enable the Cloud Integration Flows now.

Access the Integration Suite and go into the Discover - Integrations section. Search for the package name Integration between SAP Integrated Business Planning for demand and SAP Analytics Cloud by typing in the whole name or parts of the name or description like IBP.

Do a left click on the package to access it. Within the package click Copy to copy the package into your tenant.

After the copy has been executed successfully the package will be available in the Design - Integrations section on your tenant.

In the next step the newly created package will be configured.

In the previous steps we have configured credentials for SAP Integrated Business Planning, SAP Analytics Cloud and SAP S/4HANA. All of them have been stored in SAP Cloud Integration as Secure Materials. These Secure Materials will be used in the Integration Flow configuration to enable the Integration Flow to read and write data into SAP Integrated Business Planning, SAP Analytics Cloud and SAP S/4HANA.

You need to configure all Integration Flows except Write to SAP IBP for Demand using OData. This step configures the Integration Flow
Send IBP for Demand baseline to SAP Analytics Cloud Marketing model as an example. The other flows are configured in the same way.

Access the Integration Flow and press Configure

The next step is about configuring the API endpoint. The API endpoint, a URL, will be used to call the Integration Flow from SAP Analytics Cloud. The URL consists of two parts. The first part with the host of your Cloud Instance tenant and the path to all Cloud Integration Flows cannot be configured. But the last part that identifies this Integration Flow can be configured. In the popup go to the Sender tab. In the Address field enter a name. This name specifies the Integration Flow in the URL.

If you would to name the API endpoint for the Integration Flow that writes IBP baselines into the SAP Cloud Analytics Marketing model like https://my-cloud-instance.com/http/xpa_mkt_write2sac
than you would need to configure /xpa_mkt_write2sac in the Address input box (including the slash /).

In the Receiver tab you need to configure the SAP Analytics Cloud tenant URL as <SAPHDA_SAC_URL> and the Security Material name with the credentials of your SAP Analytics Cloud instance in Credential Name. Following the example of step 3 it would be SACoAUTH.

The same configuration of Security Material name and URL needs to be done for SAP Integrated Business Planning and SAP S/4HANA by choosing the systems from the combo box. This needs to be done per Integration Flow that you would like to use.

Close the popup and ensure that you deploy the Integration Flow after all the settings are done by leaving the popup with the deploy button or by pressing the deploy button in the upper right corner of the Integration Flow designer.

Congratulations! With this tutorial you have now enabled the Integration Flows to access SAP Analytics Cloud, SAP Integrated Business Planning and SAP S/4HANA. You have also created and enabled credentials to access the Integration Flows via API. So you can now maintain SAP Analytics Cloud Multi Actions to trigger these Integration Flows. This will be part of the tutorial xP&A Commercial Planning - How to manage data loads.