on 2024 Sep 09 1:12 PM
Introduction
By the end of this article, you will be able to establish connectivity between Datasphere and Azure Data Lake Storage Gen2 using a Service Principal with a Certificate.
A service principal in Azure is an identity created for applications, hosted services, and automated tools to securely access Azure resources. It defines the permissions and roles assigned to the application within a given tenant.
In the SAP ecosystem, it functions similarly to a technical account used for connecting to different systems for RFC calls.
Pre-requisites:
ADLS Gen2 Storage Account, Service Principle with Certificate.
Steps to Configure:
Login to SAP Datasphere
Go to <Your Space> -> Connections -> Create
Where to find OAuth Token Endpoint, Client ID?
Go to Azure portal -> App Registrations
Certificate and Key:
To Complete the authentication part, Certificate and Key needs to be uploaded.
Extension of the certificate should be in .pem and key should be .key.
Once you receive the SPN with certificate.
Refer link How to convert pfx to pem – sslhow.com
This completes the set-up at the datasphere side which establishes Data-lake API as end-point
to connect to ADLS Gen2 Storage Account.
Steps on the Azure side:
Assign Read/Write access to SPN for the Azure Gen2 Storage Account.
Note:
If the Azure subscription for Datasphere and the subscription for the Azure storage account endpoint are different, you will need to enable the VNET of Datasphere in the network rules of the Azure storage container endpoint. For more information, please refer to the note below.
User | Count |
---|---|
67 | |
11 | |
11 | |
10 | |
9 | |
9 | |
7 | |
6 | |
5 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.