Sorry, German only...

Microsoft bietet zum Thema "SQL Server 2005 – optimaler Einsatz in SAP-Umgebungen" ein kostenfreies TechNet Seminar in verschiedenen deutschen Städten an.

Referenten sind:

• Martin Sudbrock – Partner Account Manager, Microsoft Deutschland GmbH
• Guido Schmitt – Senior Consultant, Microsoft Deutschland GmbH

Beschreibungstext von der Webseite:

"Die Microsoft-Plattform ist die Standard-Plattform für SAP-Lösungen. Immer mehr SAP-Kunden entscheiden sich für Microsoft und damit für die seit zwei Jahren bewährte Mehrheitsplattform im Datenbankumfeld bei SAP-Neuinstallationen. Inzwischen erfolgen zwei von drei SAP-Neuimplementierungen auf Windows Server 2003 und mehr als 42 Prozent auf SQL Server 2005.

SQL Server 2005 ist die zukunftssichere Datenmanagementplattform für hochverfügbare, leistungsfähige und zuverlässige Installationen von SAP-Lösungen.

In diesem Seminar geben wir Ihnen einen Überblick, wie Sie SQL Server 2005 optimal in einer SAP-Umgebung einsetzen können. Die Schwerpunkte des Seminars sind:

• Skalierbarkeit und Performance von SQL Server 2005 für SAP-Anwendungen
• Hochverfügbarkeit von SQL Server 2005 für SAP
• Konfiguration von SQL Server 2005 für SAP
• SQL Server 2005 als Datenmanagementplattform für SAP
• Migration auf SQL Server 2005 im SAP-Umfeld"

This weblog is sponsored by FITS.
We support PASS Germany!

This link Transaction Codes for BW Developers to a SDN Forum post contains some really useful listings for transactions normally used by SAP BW Developers and SAP BW Basis.

This weblog is sponsored by FITS.
We support PASS Germany!

With SP1 SQL Server Reporting Services 2005 will now also accept SAP BW as a data source. The connection will be established without any custom code in SAP BW (and therefor no need of installation assistance by SAP Administration) using XML/A (XML for Analysis, XML standard for Online Analytical Processing [OLAP] using standard Internet protocols), which is an established standard as described at the website of the organization (http://www.xmla.org/, http://www.xmlforanalysis.com/).

Microsoft provides a really good white paper, which includes a step-by-step guidance and also describes some prerequisites and basics. There is also a video, which visualizes the described steps of the white paper.

The whole documentation and the connect to SAP BW is real good work, but some things regarding "real life" is not included in the white paper or is not mentioned as clearly as needed - in my personal opinion.

Basic Information

The SDN at http://www.sdn.sap.com/ (SAP Developers Network - do not hesitate to surf there, you will not get infected... :-) ) provides a real good basic information as pdf-file for XML for Analysis from the SAP point of view.

SAP System Prerequisites

If you are authorized to connect to the SAP system and would like to test if the XMLA SOAP Services is up and running please use transaction SICF (Service Maintenance) to check this - as described in the above mentioned pdf-file on page 14. And if SAP Administration does not know how to verify this hand them over the pdf-file...

You will also be able to discover the service url using the transaction SE37 and the function module RSBB_URL_PREFIX_GET as desribed on page 13.

Patch Level

As described in the white paper, there is a certain patch level required to assure a working XMLA-Connect.

• Support Package 30 for SAP BW 3.0B
• Support Package 24 for SAP BW 3.1
• Support Package 16 for SAP BW 3.5
• Support Package 6 for SAP NetWeaver 2004s (BW 7.0)

Other patch levels will also work BUT... will not support real interesting things like selections via variables for example. But I would suggest that you COULD use Reporting Services to do a real smart master data reporting for example - the best way to convince the stakeholder of the SAP System that doing the patching will be really worth the work.

You will not be able to convince the SAP Administration to do the patching required for Reporting Services, because implementing a Patch is not as "easy" as in the SQL Server World, doing a patch in SAP BW definitely means a own and time intense project, because all implementations in the system have to be checked, if they would work as expected and as designed at the current patch level.

So just think about this point and do not hassle with SAP Administration and please do not start moaning, if they are not willing to do the patch update - remember, it is not as in other worlds...

Language / Communication with SAP BW Developers

Do not wonder about the terms that SAP Developers are using while talking about the objects in SAP BW - this will be different from the terms you will encounter using XMLA or you certainly will know from the SQL Server world. So communication sometimes will be difficult but an accurate translation will be helpful and is also provided in the pdf-file on page 19 and 20. 

Security & Single Sign on (SSO)

To be shure, that we think and talk about the same thing while having SSO in the mind first a definition:

"What’s the Difference Between Authentication and Single Sign-On?

Authentication, or initial authentication, occurs when users first identify themselves to a system, and in turn this identification is verified. Initial authentication in SAP environments can take a number of different forms, ranging from anonymous or guest access to a Web site through the familiar user ID and password procedure, to using X.509 digital certificates.

Where single sign-on is in place, the user is issued credentials in one form or another following initial authentication. This allows the user to forego subsequent authentication steps when accessing further systems, offering not only convenience, but also increased security by limiting the number of times users enter sensitive information. This reduces the temptation for users to choose an easy-to-guess password. Single sign-on authenticates the user to access all the applications they have been given rights to in the SSO landscape, and eliminates future authentication prompts when the user switches applications during that particular session."
[from the SAP Developers Network]

But what does this mean regarding RS on SAP BW?
While SAP BW is a data storage and reporting system whith an own authorization system you definitely would like to make the usage of the reports as comfortable as possible. Though a user should not need to athenticate against the SAP system as backend while running the different reports and provide his credentials again and again. Therefor a automatic authentification should be possible and established by the system without contacting the user.

Normally in enterprise environments you will not face a homogeneous landscape whith SAP BW residing on a Windows Server but will discover, that SAP BW is running on a UNIX OS.

If you are a lucky one with SAP in a windows environment, you probably will be able to use kerberos and the SAP CUA (central user administration) and this will be the right documentation:

• http://www.microsoft-sap.com/doc/SAP_AD_Final.doc
• https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/8302a929-0501-0010-05b5-d48f544bc572

But what to do, if you are facing the "standard", SAP BW on UNIX OS??
There are alos certain ways to implement a SSO solution between Windows and UNIX, including Kerberos, or 3rd-Party-Tools like the ticketing with the Tivoli Access Manager or the solution from secude. You will find appropriate documents on the SDN or other sources like:

• UNIX and Kerberos
• IBM Tivoli Access Manager
• secude

If you do not like to establish the SSO via a 3rd-Party-Tool and are using the SAP ITS (Internet Transaction Server) than you should read this article provided by Thomas Jung very intendly.

If you can not solve the above mentioned topics, you probably could use a technical user to connect RS via XML/A, but please consider, that the user authorization in SAP BW normally is based on so called authorization objects (for example key identifiers like company code) and you will not be able to use this build-in security concept for the user while using a technical one and though you will have a loose of security. If you are just planning to deploy master data reports, than the use of a technical user could be without security concerns.

I would highly recommend that you avoid a scenario where you implement your own security structure in Reporting Services or in SQL Server. Then you are only building up certain places for administration and could not be sure that your "home-made" security provides the same security settings for the users as the settings in SAP BW. And because of SAP BW normally being the leading system and the main reporting system you should prevent this situation.

Please do not forget to ONLY use the https-SOAP-Connection, whether you are using SSO nor provide the credentials via the reporting manager application during the report call.

Conclusion

Doing Reporting Services on SAP BW is a good option to enhance enterprise reporting towards the microsoft plattform regardless, which data source is connected. Doing so also will bring up some points for discussion or some pain points - if you face a hardliner SAP Administration for example... :-)
But to be honest, you also would not be really glad if your SQL Server data would be assimilated by a SAP BW system, would you?

If someone has other arguements, opinions and especially hints on the SSO-topic please feel free to use the comments

This weblog is sponsored by FITS.
We support PASS Germany!

SQL Server 2000 Driver for JDBC
this support article maybe usefull for the first steps: Sample connection pool manager for use with Microsoft SQL Server 2000 Driver for JDBC

Microsoft SQL Server 2005 JDBC Driver

Ever thought about connecting your SAP system to your SQL Server?
Coming soon...

This weblog is sponsored by FITS.
We support PASS Germany!

Sorry, German only...

Jochen Hein stellt einen Artikel zum Thema "Wir hacken eine SAP Datenbank" bereit.

Wie im Artikel beschrieben werden nur Techniken benutzt, die jeder Admin "schon lange kennt"...

Der Artikel geht dabei aber von einem Oracle-System als Datenbankserver aus - was man, basierend auf den Infos aus dem Blog von Thomas Dreller, nicht als Standard sehen kann - zumindest nicht in Deutschland:
"In Deutschland liefert SAP mehr als die Hälfte seiner Produkte für einen Betrieb auf der Microsoft-Plattform aus."

Viel Spaß beim Ausprobieren und Testen der Sicherheit - und nicht vom SAP-Admin erwischen lassen... ;-)

This weblog is sponsored by FITS.
We support PASS Germany!

The SAP Executives are blogging.

Interested?

Take a look:
http://www.sap.com/community/pub/blogs.epx

But you will have to be registered...

This weblog is sponsored by FITS.
We support PASS Germany!

This is a step-by-step-description how to create a web service definition - sorry, just a german link...

http://help.sap.com/saphelp_webas630/helpdata/DE/96/e7a574ebf23a428287bf3d1b3dca21/frameset.htm

This weblog is sponsored by FITS.
We support PASS Germany!

Sorry, German only...

Unter dem Link http://www.se38factory.de/abap-shop/index.html findet sich der Online-Shop der SE38-factory, die sich selber als "ABAP - Kaufhaus" beschreibt.

Man kann hier zielgerichtet nach fertigen Lösungen suchen und diese erwerben.
Viel interessanter ist aber, das man als Entwickler dort seinen eigenen Quellcode vermarkten lassen kann - quasi für nen Euro nebenbei... ;-)

This weblog is sponsored by FITS.
We support PASS Germany!