- SAP Managed Tags
Introduction:
In the contemporary business environment, effective and integrated supply chain planning is crucial for maintaining a resilient and agile supply chain. SAP Integrated Business Planning (IBP) is a solution designed to streamline and optimize this process, aligning strategic, tactical, and operational plans. This cloud-based platform employs advanced analytics, machine learning, and collaboration tools to improve demand forecasting, sales and operations planning, inventory management, and overall supply chain orchestration.
The integration of Joule with SAP IBP introduces the capabilities of generative AI into the planning solution. Currently, Joule supports SAP IBP through an intuitive search functionality within the help feature, allowing users to quickly find and access relevant information.
However, Joule's support for SAP IBP will not be limited to search functionality. We are actively developing advanced planning-specific capabilities aimed at increasing user proficiency and productivity. These forthcoming features will provide users with more intuitive tools and actionable insights, ultimately elevating supply chain management. The goal is to enhance responsiveness, accuracy, and strategic decision-making within the supply chain.
Here in this blog, I am going to walk you through the steps that are required for you to activate Joule for SAP Integrated Business Planning, however, the updated information can always be found on the help page. If you are just getting started with Joule for your SAP IBP, please ensure to read the SAP IBP System Registration with SAP BTP listed below and first and then followed by the blogs mentioned below.
****************************************************************************
This blog post is a series for Joule setup:
- SAP Business AI – Overview for all !!! (Includes information on Joule Supported Data Centers, Different scenarios during Joule setup, etc..)
- Joule - Unified Setup: Bridging Simplicity and Performance (Demo Video to understand the Unified Setup, Joule basics & architecture, how to set up Joule, etc...)
- Joule Setup – End-to-End Setup Guide (for all Line of Business) Unified Approach
- Joule for SAP S/4HANA Cloud Public Edition - Setup Guide
- SAP Digital Supply Chain
- Joule – Getting Started with Document Grounding - setup guide
- Analytical Insights
Blogs - Work in Progress (WIP):
- SAP SuccessFactors Joule Activation (WIP)
- SAP Digital Supply Chain (WIP)
- SAP Asset Performance Management
- SAP Product Lifecycle Management
- SAP Digital Manufacturing
- SAP Build Work Zone, standard edition, and SAP Mobile Start
- and more to be added towards General Availability
****************************************************************************
If you are following the blog series on activating the Joule service for IBP, here are few things that you need to consider:
We need the following user Role:
- SAP Business Technology Platform – Global Administrator
- SAP Cloud Identity Services Administrator
- SAP Integrated Business Planning Administrator
Before you start with the Joule integration, we need to do the system registration for your SAP IBP system and SAP Business Technology Platform. So let us take a look into this process first and then proceed with the Joule setup.
1. SAP IBP System Registration with SAP BTP
a. Generate the Token for your IBP System
b. Maintain Extensions on SAP BTP in your IBP System
2. Create SAP BTP Subaccount (Refer to Joule - Unified Setup - End-to-End Setup Guide)
3. SAP IBP Integration with Joule
a. Check Communication Arrangements
b. Maintain Custom Content Security Policy
4. Verify your Joule Integration
a. Validate Destinations
b. Validate Workzone Content Provider
5. Validate Communication Arrangement
6. Create Communication Arrangement
a. Create Communication User
b. Create Communication System
c. Create Communication Arrangement
7. Sync Users & Roles from IBP to Build Workzone
a. Create Source System in IAS
b. Create Target System in IAS
c. Run Jobs to Sync Users Roles from IBP to Build Workzone
8. Validate Authentication of Joule
9. Test Navigational capabilities of SAP IBP
Let us look into the details of integration:
Joule Setup – End-to-End Setup Guide (for all Line of Business) Unified Approach
Please read the details below to understand your Joule Integration Process based on your current setup in your organization.
1. SAP IBP System Registration with SAP BTP
a. Generate the Token for your IBP System
Login to your SAP Business Technology Platform, click on System Landscape -> click on Systems -> search for your IBP System and click on it(this is be listed and showing as auto discovered).
On the right screen click on Get Token -> in the pop up window select All Communications Scenarios -> click on Get Token.
Copy the Token value and close the window.
b. Maintain Extensions on SAP BTP in your IBP System
Login to your SAP IBP System and search for Maintain Extensions on SAP BTP -> click on New -> Enter the Token Value that was generated in the previous step, enter a description and click on Create.
Image 4
2. Create SAP BTP Subaccount (Joule Setup – End-to-End Setup Guide (for all Line of Business) Unified Approach)
You will need to navigate to this blog to complete the Subaccount creation process and complete the steps required.
3. SAP IBP Integration with Joule
With the release of SAP IBP 2411, the communication port SAP_COM_0882 is used for Joule, which is auto-enabled on all systems. When you run the Joule Booster, it creates a communication arrangement and communication system in your IBP system for SAP Digital Assistants Services. This communication setup should not be edited or removed, in case of any changes it will impact the Joule behavior and will stop working.
a. Verify the Communication Arrangements and Communication System
This step is only required as a verification post Joule Booster run, and no changes are required, feel free to skip this verification step. To know more about what booster has executed, you can go to your SAP IBP system, go to Communication Arrangements -> search for SAP_COM_0882, and click on it.
You should be able to see the following details which is important to know. The booster creates a Communication Arrangement and Communication Systems which are shown below.
In the Communication Arrangement, you will be able to see the details on Common Data with API-URL and the connected Outbound Communication and Outbound Service, which has the details related to the Joule service from the SAP BTP Subaccount.
Image 6
If you click on the Display option, you will see the Communication System setting that the booster has executed.
This confirms that the setting is good and we can go ahead with the next steps.
b. Maintain Custom Content Security Policy
This step is required to enable the Joule icon in your SAP IBP System.
To enable Joule, we need the Joule Service URL. To get the URL, you can go back to your SAP BTP Subaccount -> Click on Instance and Subscription -> Click on Joule. You should be able to see the message “The service is up and running.” You need to copy the URL as shown below.
Now, go back to your SAP IBP System navigate to Manage Content Security Policy app -> click on Trusted Sites -> navigate to Resources Scripts (UI_RESOURCES_SCRIPTS).
Under the Managed by Customer click on New and enter the Joule URL and Save the settings.
Refresh your SAP IBP system to get the Joule icon active. This completes the Joule integration with the SAP IBP system.
4. Verify your Joule Integration
4.a Validate Destinations:
Validate that the DT, RT, NavigationService and SWZ_JOULE destinations are created automatically.
Note: "NavigationService" destination will be automatically created as Product teams have automated it. If you already ran the "Booster" OR have an existing Joule setup and do not see the "NavigationService", you probably set it up before the automation came into place. Follow the steps below to add the destination.
Go to your Joule Subaccount -> Instances & Subscriptions -> Select 3 dots at the end of Build Workzone instance and click "Create Service Key"
Provide a service key name (e.g: skeybwz) and click "Create"
Download the Service Key by clicking "View Credentials" after the service key is created. It will download a .json file. (E.g: skeybwz.json)
Open the downloaded .json file. Keep a note of the 4 values highlighted in yellow. (portal-service, clientid, clientsecret & URL)
Go to BTP Subaccount of Joule -> Destinations -> Click "Create"
Select "From Scratch" -> Click "Create"
Enter the "URL", "Client ID", "Client Secret" and "Token Service URL" from the SAP Build Workzone service key created
Note: Token Service URL must end with "/oauth/token"
Property Name | Value |
Name | NavigationService |
Type | HTTP |
Proxy Type | Internet
|
URL | "portal-service" field from Workzone Service Key |
Authentication | OAuth2UserTokenExchange |
Client ID | "clientid" field from Workzone Service Key |
Client Secret | "clientsecret" field from Workzone Service Key |
Token Service URL | "url" field from Workzone Service Key followed by /oauth/token |
Token Service URL Type | Dedicated |
4.b Validate Workzone Content Provider
Navigate to your Joule Subaccount -> Instances & Subscriptions -> Subscriptions and launch the "SAP Build Workzone".
Note: If your user does not have access to SAP Build Workzone, go to Subaccount -> Security -> Users and add "Launchpad_admin" role by selecting "Assign Role Collection"
Validate that the Content channel for the "SAP IBP Content provider" is automatically created
Now let us go ahead and interact with Joule from your SAP IBP System. Click on the Joule Diamond Icon and a new Joule Web Client plugin should load and allow you to interact with Joule as shown below.
Image 11
Note: At this stage of Joule Setup, only informational messages are supported. To enable the Joule navigational capabilities, please proceed with the remaining setup steps/cards.
5. Validate Communication Arrangement
Validate Communication Arrangement in SAP IBP System
Navigate to SAP IBP -> Communications Arrangements -> Select Scenario ID "SAP_COM_0647".
If the Exposure version = V1, you can skip this section. If it's "V2" follow the steps below to change it to "V1"
Open SAP IBP in a new Window/Tab
Navigate to SAP IBP -> Communication Arrangements -> Click "New"
Select Scenario: SAP_COM_0647 and enter Arrangement Name: SAP_COM_0647_Joule -> Click "Create"
Copy these values from the previously created Communication Arrangement
Communication System, Logical Target Identifier, Exposure Role Selection and Job Execution Details
Maintain "Exposure Version" as "V1"
Delete the Previously created communication Arrangement "SAP_COM_0647" before saving this new one. If not, you will get a warning that a duplicate entry exists and system will not allow to save it.
6. Create Communication Arrangement
To enable navigational Joule capabilities in SAP IBP, you must create a new Communication Arrangement to synchronize Users and Roles with SAP Build Work Zone. This setup ensures that IBP user and role data is correctly integrated with Work Zone
6. a. Create Communication User
Go to IBP -> Maintain Communication User -> Click "New"
Enter User Name = ZSAP_COM_193_JOULE_USER
Description = Joule IPS User (Do Not Change)
Password: Propose Password -> Click on "Create"
Note: Keep the "User Name" and "Password" handy for IPS setup
6. b. Create Communication System
Go to IBP -> Communication Systems -> Click "New"
Enter Communication System ID as "ZSAP_COM_SYS_193_JOULE" and click "Create"
Enter your IBP system URL in Host Name (E.g: my312027.scmibp1.ondemand.com)
Click "+" for "Users for Inbound Communication"
Select the "Communication User" created in Previous step. Click "Ok" and "Save"
6.c. Create Communication Arrangement
Go to IBP -> Communication Arrangements -> Click "New"
Search for Scenario "SAP_COM_0193". Enter Arrangement Name as "SAP_COM_0193_JOULE" and click "Create"
Select the Communication System created in Previous step and click "Save"
Note: Copy the API-URL for use in next step
7. Sync Users & Roles from IBP to Build Workzone
7.a Create Source System in IAS
Create a Source System for SAP IBP in IAS. This step registers IBP as a source system, enabling the extraction of users and roles for synchronization with SAP Build Work Zone.
Add a Source system in CIS/IAS
Go to SAP CIS/IAS -> Source Systems -> Click Add
Select Type = SAP Integrated Business Planning for Supply Chain and enter your IBP System name and Description
"Click on "Browse" to select the IBP Source json file if you have one.
Use the link below to download source and target json files: https://raw.githubusercontent.com/hgdgng1/Config-Files-IBP-BWZ/main/source%20%26%20target%20BWZ.zip
Navigate to the "Properties" tab and enter the following values: (Note: If you upload a .json file, sample properties will be pre-filled. Please review and update them accordingly)
Authentication: BasicAuthentication
ProxyType: Internet
Type: HTTP
URL: Enter the API-URL obtained from "Communication Arrangements" from previous card
User: Enter the Communication User created in IBP in the previous card.
Password: Enter the password for the Communication User set up earlier.
Click "Save"
7.b Create Target System in IAS
Add a Target system in CIS/IAS
Go to SAP CIS/IAS -> Target Systems -> Click Add
Type: SAP Build Work Zone, standard edition
System Name: Enter a Name (E.g: Joule Target System - Workzone)
Description: as required
Source Systems: Select the Joule Source that was created in the previous step (E.g: IBP - Source - my312027)
Click "Save"
Note: You can also upload the target JSON file downloaded in previous step as a shortcut to prepopulate fields
Once the Target System is saved, you should be able to see that the Transformation and Properties will be auto added with default values.
Click "Edit" and add the following values:
Most of the values are from the "SAP Build Workzone" service key file.
Download the service key by going to Subaccount of Joule -> Instances & Subscriptions -> Instances -> Select and Download the service key.
Property Name |
Value |
Type | HTTP |
URL | "portal-service" value from the SAP Build Workzone Key file |
ProxyType | Internet |
Authentication | BasicAuthentication |
User | "clientid" value from the SAP Build Workzone Key file |
Password | "clientsecret" value from the SAP Build Workzone Key file |
OAuth2TokenServiceURL | "url" value from the SAP Build Workzone Key file followed by /oauth/token For example: https://ips-cflp-woaealle.authentication.sap.hana.ondemand.com/oauth/token |
cflp.providerId | Enter a valid providerID value.
The provider ID is specified in the Channel Manager of the SAP Build Work Zone. Go to subaccount of Joule -> Instances & Subscriptions -> Launch Build Workzone -> Channel Manager If you do not have access to Build Workzone, add a role "Launchpad_admin" to your user in the Subaccount |
7.c Run Jobs to Sync Users Roles from IBP to Build Workzone
The next step is to run the synchronization jobs to transfer user and role data from SAP IBP to SAP Build Work Zone Standard.
Go to SAP CIS/IAS -> Identity Provisioning -> Source Systems
Select your Source System (E.g: IBP - Source - my312027) -> Jobs -> Select "Run Now" for the "Resync Job"
The job should complete with the status: Finished Successfully.
If there are any invalid users or roles that cannot be synchronized, the job status will appear as Finished with Errors.
Click on the job to view the Job Execution Details.
In this example, you will see that the job has successfully read 3 groups and 5 users from the SAP IBP system and written them to the SAP Build Work Zone system
Go to Subaccount of Joule -> Instances & Subscriptions -> Launch SAP Build Workzone, standard edition -> Channel Manager
Click "Update Content" for the "SAP IBP Content Provider"
8. Validate Authentication of Joule
Validate if the Default Identity provider for the Joule (das-ias) is same setting as the IBP system
Go to CIS -> Applications & Resources -> Applications -> Select your Joule application (starts with das-ias) -> Trust -> Conditional Authentication -> Default Authenticating Identity Provider
Check the Default Identity Provider for your Joule application (starts with das-ias). If you are using Okta or Microsoft EntryID or any other SSO for your IBP system, select the same for the Joule
9. Test Navigational capabilities of SAP IBP
Go to IBP (Incognito Mode in browser or delete history for past 24 hours) and launch Joule
You will see starter conversations showing up.
Example of a navigational starter conversation is "Open Planner Workspaces". Once you select the App, the system should launch the Fiori App for "Planner Workspaces:
Chat in natural language with Joule
If you don't know the exact app name or have a typo, Joule will understand the intent and show the relevant apps to launch.
If you have a Unified Joule setup (IBP and any other system added to a single Joule instance), you can ask questions from the other application.
E.g: Show my leave balances will show the leave balance from Successfactors and also navigates the user to Successfactors
If you have any issues, you can reach us via SAP Incidents. Use the following components: “CA-JOULE” for general issues and “BC-CP-MP-FOR” for Joule Booster formation issues.
Credits and special thanks to Laura Tozzo, Rudiger Meyfarth, Heiko Steffen, Aditi Shrivastava, and the IBP Team.
Happy Learning!!!
Regards,
Nagesh Caparthy & Hemanth Grandhi
SAP Business AI RIG Team
Bluesky| User | Count |
|---|---|
| 123 | |
| 37 | |
| 36 | |
| 19 | |
| 17 | |
| 15 | |
| 12 | |
| 12 | |
| 10 | |
| 8 |
