Preparations for SAP Integration Suite - Cloud Integration 

Create Communication User (BASIC Authentication)

If you plan to use BASIC authentication to connect to SAP Integration Suite – Cloud Integration you need to create a communication user.

The user can be a company S-user. Please contact your companies S-User super-admin to request a new S-user for this purpose.

• The user will be maintained in the HTTP endpoint and must be must have a role which contains the following privilege:
  • In the Neo environment:
    • IntegrationOperationServer.read
      
    • NodeManager.read
  • In the Cloud Foundry environment:
    • MonitoringDataRead
• For more information about default role assignments, please refer to SAP Integration Suite – Cloud Integration documentation: https://help.sap.com/viewer/product/CLOUD_INTEGRATION/Cloud/en-US?task=operate_task → Security → Select the link for your platform → Identity and Access Management → Persona → Tasks and Permissions 

Prepare and gather OAuth Information for SAP Integration Suite - Cloud Integration on SAP Cloud Foundry

To enable OAuth authentication between SAP Focused Run and SAP Integration Suite - Cloud Integration you need to create an instance with a service key for the Process Integration service with the necessary authorizations. 

Create Service Instance

1. Go to your SAP BTP Cockpit → Access the subaccount used for SAP Cloud Integration
2. Go to "Instances and Subscriptions"
3. Click the 'Create' button to create a new instance
4. Basic Info
   1. Service: Process Integration (it-rt)
   2. Plan: api
   3. Runtime Environment: Choose Cloud Foundry
   4. Space: Select the appropriate space (depending on your company)
   5. Instance Name: Enter an instance name
   6. Click 'Next'
5. Parameters
   1. Select the role "MonitoringDataRead" in the 'Roles' drop-down on the Form tab
   2. Click "Create Instance"

Create Service Key

After the instance is created you can create the service key.

1. Select the row of the instance
2. Go to tab "Service Keys"
3. Click 'Create'
4. Enter a name for the service key
5. Click 'Create'

Download the service key file. You will need the information in the file later when you create the end-point in SAP Focused Run.

Prepare and gather OAuth Information for SAP Integration Suite - Cloud Integration in the Neo environment

If you want to use OAuth authentication to connect to SAP Integration Suite - Cloud Integration in the Neo environment, you need to create a client with the correct authorizations:

1. Go to the SAP Business Technology Platform Cockpit
2. Navigate to Security → OAuth
3. Go to tab 'Clients'
   1. Click 'Register New Client'
   2. Choose a name
   3. Set the subscription to the CPI tenant (ends with xxxx.tnm)
   4. Generate an ID (it is recommended to use the suggested unique ID)
   5. Select Authorization Grant as 'Client Credentials'
   6. Choose a Secret
   7. Click on Save
4. Note down the Client ID and the Client secret for later use in SAP Focused Run
5. Go to tab 'Branding' 
   1. Note down the 'Token Endpoint' URL to be used as OAuth URL
6. Navigate to Security → Authorizations
7. As a user enter 'oauth_client_<client_ID>' (the Client ID generated in the previous step)
8. Grant the user the roles:
   • IntegrationOperationServer.read
   • NodeManager.read
9. Save you changes.

Input Values for SAP Integration Suite - Cloud Integration

• Tenant: Tenant name of your tenant
• Tenant Management Node URL:  https://<host>.hana.ondemand.com 
• Description (optional)

Input Values for SAP Integration Suite - Cloud Integration

For SAP Cloud Integration you can choose if you want to use Basic or OAuth for authentication.

The input fields depend on the selected authorization method:

• Type: BASICAUTH
  • User: Connection user created before
  • Password: Password for the user
• Type: OAUTH
  • OAuth URL: the 'Token Endpoint' URL from SAP Cloud Integration
  • Client ID: The ID of the client you want to use
  • Client Secret: The Secret of the client you want to use