SAP IAG intergration with SAP Analytical cloud (SAC)

[JAPNEET_SINGH_JP]

SAP Cloud Identity Access Governance (IAG) serves as a pivotal cloud-based solution, orchestrating identity and access management across intricate hybrid environments. By centralizing access request processes through a user-friendly, self-service portal, IAG streamlines provisioning for both on-premises and cloud applications, including seamless integration with SAP Analytics Cloud.

The first step is configuring SAP Cloud Identity Access Governance (IAG) within SAP Business Technology Platform (BTP) environment involves establishing a proxy destination. Specifically, the creation of the IPS_PROXY destination within your subscriber subaccount is paramount for seamless communication and functionality.

Step 1. Create Proxy Destination in BTP is not created.

1. Navigate to the subscriber subaccount for SAP Cloud Identity Access governance in SAP BTP and create a destination with the name IPS_PROXY as shown in the table below.
2. Enter the Properties listed in the table below for the destination. All properties must be entered. Some properties must be added as Additional Properties. Copy the names of all properties as displayed. Property names and values are case sensitive.
   

   The url in the above can be fetched from CIS cockpit. 

   

   For user and password

   1. Go to the Identity Authentication, Users Authorizations-> Administrator and enable the option Manage Identity Provisioning for your user.
   2. Open your Identity Provisioning and navigate to Security Authorizations   Manage User Authorizations -> Administrators.
   3. In the section Users & Authorizations Administrators, Add System for Identity Provisioning and Configure Authorizations for the Access Proxy System API. Note down the Client ID and Secret (once the secret is generated, you cannot retrieve or change it.).
      

      Step 2:Create Proxy system for SAC in CIS.

      

      Maintain the properties exactly as shown:

      

      The OAuthtoken, user, URL and password is to be fetched from SAC.

      In SAC: Goto system-> Administrator

      

      Step 3: Create application in IAG.

      

      Run Repository sync. 

      This completes the SAP Cloud Identity Access Governance (IAG) integration with SAP Analytics Cloud, enabling centralized, secure access management

Regards
JP