Setup for SAP Integration Suite - Cloud Integration on Cloud Foundry

This page explains how to connect SAP Integration Suite - Cloud Integration running on Cloud Foundry (Multi-Cloud) to SAP Cloud ALM to enable monitoring.

Currently the following monitoring application are supported for SAP Integration Suite - Cloud Integration:

Setup Video

The following video demonstrates the setup steps to set up Integration & Exception Monitoring for SAP Integration Suite Cloud Integration.

A textual step by step description for all setup steps is provided in the sections below the video.

 

Set Up Application Monitoring for SAP Integration Suite Cloud Integration running in Cloud Foundry

  • Prerequisites for this video: 
    • You need a sub-account member with "Space Developer" authorizations for the space in the SAP Integration Suite Cloud Integration sub-account in SAP BTP Cockpit
    • You need a user with the role "Integration Monitoring Integration Architect" in SAP Cloud ALM

Setup Steps in SAP Integration Suite – Cloud Integration

Choose your Authentication Method

You can choose between BASIC authentication and OAuth authentication to connect SAP Integration Suite - Cloud Integration to SAP Cloud ALM. 

  • OAuth Authentication (recommended): Please follow the section "OAuth Authentication: Prepare and obtain OAuth Credentials" below
  • BASIC Authentication: Please follow the section "Basic Authentication: Create Communication User" below

Restrictions for SAP Integration Suite – Cloud Integration on Cloud Foundry

Please note that customers that are running SAP Integration Suite – Cloud Integration in Cloud Foundry and use a Customer IdP (Identity Provider) for authentication, cannot use BASIC authentication to connect to SAP Integration Suite – Cloud Integration via HTTP end-point. 

These customers can only use OAuth authentication in their end-point for now.

See limitations documented in SAP note 2752867.

OAuth Authentication: Prepare and obtain OAuth Credentials

To enable OAuth authentication between SAP Cloud ALM and SAP Integration Suite - Cloud Integration you need to create an instance with a service key for the Process Integration service with the necessary authorizations. 

To be able to create the instance in the space for your SAP Integration Suite Cloud Integration you need "Space Developer" access to this space.

Create Service Instance

You can use the same instance for all supported use cases. Make sure to select the appropriate roles in the step 'Parameters' during the instance creation.

  1. Go to SAP BTP Cockpit → Access the sub account used for SAP Cloud Integration
  2. Go to "Instances and Subscriptions"
  3. Click the 'Create' button to create a new instance
  4. Basic Info
    1. Service: Process Integration (it-rt)
    2. Plan: api
    3. Runtime Environment: Choose Cloud Foundry or Neo
    4. Space: Select the appropriate space (depending on your company)
    5. Instance Name: Enter an instance name
    6. Click 'Next'
  5. Parameters
    1. To use Integration & Exception Monitoring: Check the role "MonitoringDataRead" in the 'Roles' drop-down on the Form tab
    2. To use Health Monitoring: Check the role "HealthCheckMonitoringDataRead" in the 'Roles' drop-down on the Form tab
    3. Click "Create" to create the instance

Create Service Key

After the instance is created you can create the service key.

  1. Select the row of the instance
  2. Go to tab "Service Keys"
  3. Click 'Create'
  4. Enter a name for the service key
  5. Click 'Create'
Download the service key file. You will need the information in the file later when you create the end-point in SAP Cloud ALM.

Basic Authentication: Create Communication User

To use BASIC authentication to connect to SAP Cloud ALM to SAP Integration Suite – Cloud Integration you need to add a communication user in SAP BTP Cockpit.

The user can be a company S-user. Please contact your companies S-User super-admin to request a new S-user for this purpose.

  • Please note that users in SAP Integration Suite – Cloud Integration running on Cloud Foundry are identified by their email address. This also applies to S-Users. This means:
    • To adjust the authorizations of a user, please search for it by its email address. 
    • When setting up the end-point for a SAP Integration Suite – Cloud Integration tenant running on Cloud Foundry please provide the email address when using basic authentication.

Add User to SAP BTP Cockpit

  1. Go to SAP BTP Cockpit → Access the sub account used for SAP Cloud Integration
  2. Go to "Security" → "Users"
  3. Click the 'Create' button to add a new user
  4. Enter the users email address as the "User Name"
  5. Select the correct identity provider
  6. Enter the email address
  7. Click the 'Create' button

Create and Assign Role Collection for SAP Cloud ALM Monitoring

  1. Go to SAP BTP Cockpit → Access the sub account used for SAP Cloud Integration
  2. Go to "Security" → "Role Collections"
  3. Click the '+' button to add a new role collection
  4. Enter a name and a description for the role collection
  5. Click the 'Create' button
  6. Click on the role collection to access it
  7. Click the 'Edit' button
  8. Add the following roles
    1. To use Integration & Exception Monitoring: Add the role "MonitoringDataRead" 
    2. To use Health Monitoring: Add the role "HealthCheckMonitoringDataRead"
  9. Add the communication user to the role collection
  10. Save the role collection

Create HTTP End-Point

Before you can start the setup make sure that your cloud service were successfully imported from the System landscape Information Service (SLIS).

If you have more than one entry in LMS with the same name, please choose the one for which the tenant and the host part of the root URL matches the parameter "url" in the service key.

You can use the same endpoint for all supported use-cases.

  1. Open the Landscape Management application from the launchpad
  2. Select your SAP Integration Suite – Cloud Integration service
  3. Press the > button at the end of the line
  4. On the tab "Endpoints" press the Add button to create a new end-point
  5. Enter a description
  6. Choose the use-cases you want to use
    1. For Integration & Exception Monitoring select: "Integration Monitoring" and "Exception Monitoring"
    2. For Health Monitoring select: "Health Monitoring"
  7. Make sure that the Root URL does not contain the path "/itspaces". You may overwrite the value in the field "Root URL" with the value of the parameter "url" in the service key.
  8. Choose your desired authentication type:
    1. OAuth2ClientCredentials: Enter the following values from the SAP Integration Suite service key
      1. Client ID: clientid
      2. Client Secret: clientsecret
      3. Token Service URL: tokenurl
    2. Basic Authentication: 
      1. Enter the user and password created in SAP BTP Cockpit
  9. Save your endpoint

Please refer back to the use-case specific setup pages for additional steps necessary to activate the single use-cases.