Setup for SAP Integration Suite - Cloud Integration on Neo

This page explains how to connect SAP Integration Suite - Cloud Integration running in the Neo environment to SAP Cloud ALM to enable monitoring.

Currently the following monitoring application are supported for SAP Integration Suite - Cloud Integration:

Setup Video

The following video demonstrates the setup steps to set up Integration & Exception Monitoring for SAP Integration Suite Cloud Integration.

A textual step by step description for all setup steps is provided in the sections below the video.

 

Set Up Application Monitoring for SAP Integration Suite Cloud Integration running in Neo

  • Prerequisites for this video: 
    • You need a sub-account member with "Administrator" access for the SAP Integration Suite Cloud Integration sub-account in SAP BTP Cockpit
    • You need a user with the role "Integration Monitoring Integration Architect" in SAP Cloud ALM

Setup Steps in SAP Integration Suite – Cloud Integration

Choose your Authentication Method

You can choose between BASIC authentication and OAuth authentication to connect SAP Integration Suite - Cloud Integration to SAP Cloud ALM. 

  • OAuth Authentication (recommended): Please follow the section "OAuth Authentication: Prepare and obtain OAuth Credentials" below
  • BASIC Authentication: Please follow the section "Basic Authentication: Create Communication User" below

OAuth Authentication: Prepare and obtain OAuth Credentials

If you want to use OAuth authentication to connect to SAP Integration Suite - Cloud Integration in the Neo environment, you need to create a client with the correct authorizations.

Create OAuth Client

  1. Go to the SAP Business Technology Platform Cockpit
  2. Navigate to Applications → Subscriptions
    • Note down the "Provider Subaccount" for the application ending in tmn 
  3. Navigate to Security → OAuth
  4. Go to tab 'Clients'
    1. Click 'Register New Client'
    2. Choose a name
    3. Set the subscription to the CPI tenant (ends with tmn)
    4. Generate an ID (it is recommended to use the suggested unique ID)
    5. Select Authorization Grant as 'Client Credentials'
    6. Choose a Secret
    7. Make sure the "Token Lifetime" is set to 60 minutes (or 1 hour)
    8. Click on Save
  5. Note down the client ID and the client secret for later use in SAP Cloud ALM
  6. Go to tab 'Branding' 
    1. Note down the 'Token Endpoint' URL to be used as Token Endpoint URL

Assign Roles for SAP Cloud ALM Monitoring

You can use the same client ID for all supported use cases. Make sure to select the appropriate roles for the client ID.

  1. Navigate to Security → Authorizations
  2. As a user enter 'oauth_client_<client_ID>' (the Client ID generated in the previous step)
  3. Grant the user the roles: You will find the roles under the correct provider subaccount for the application ending in tmn
    1. To use Integration & Exception Monitoring: Assign the roles:
      • IntegrationOperationsServer.read
      • NodeManager.read
    2. To use Health Monitoring: Assign the role:
      • HealthCheckMonitoringData.Read
  4. Save you changes.

Basic Authentication: Create Communication User

To use BASIC authentication to connect to SAP Cloud ALM to SAP Integration Suite – Cloud Integration you need to add a communication user in SAP BTP Cockpit.

The user can be a company S-user. Please contact your companies S-User super-admin to request a new S-user for this purpose.

Add User to SAP BTP Cockpit

You can use the same user for all supported use cases. Make sure to select the appropriate roles for the user.

  1. Go to SAP BTP Cockpit → Access the sub account used for SAP Cloud Integration
  2. Go to "Members"
  3. Click the 'Add Members' button to add a new user
  4. Enter the user ID
  5. Click the 'Add Members' button

Assign Roles for SAP Cloud ALM Monitoring

  1. Go to SAP BTP Cockpit → Access the sub account used for SAP Cloud Integration
  2. Go to "Security" → "Authorizations"
  3. Search for your user
  4. For the area "Roles" click the 'Assign' button
  5. Grant the user the roles: You will find the roles under the correct provider subaccount for the application ending in tmn
    1. To use Integration & Exception Monitoring: Assign the roles:
      • IntegrationOperationsServer.read
      • NodeManager.read
    2. To use Health Monitoring: Assign the role:
      • HealthCheckMonitoringData.Read
  6. Save you changes.

Create HTTP End-Point

Before you can start the setup make sure that your cloud service were successfully imported from the System landscape Information Service (SLIS).

  1. Open the Landscape Management application from the launchpad
  2. Select your SAP Integration Suite – Cloud Integration service
  3. Press the > button at the end of the line
  4. On the tab "Endpoints" press the Add button to create a new end-point
  5. Enter a description
  6. Choose the use-case "Integration Monitoring" and "Exception Monitoring"
  7. Make sure that the Root URL does not contain the path "/itspaces". 
  8. Choose your desired authentication type:
    1. OAuth2ClientCredentials: 
      1. Client ID: oauth client ID
      2. Client Secret: client secret
      3. Token Service URL: 'Token Endpoint' URL
      4. Token Service User: oauth client ID
      5. Token Service Password: client secret
    2. Basic Authentication: 
      1. Enter the user and password created in SAP BTP Cockpit
  9. Save your endpoint

Please refer back to the use-case specific setup pages for additional steps necessary to activate the single use-cases.