Now select Inbound Authentication Configuration/SAML2 Web SSO Configuration folder and Edit: On WSO2 IS application in the current Service Provider Definition, select Choose file, select your previously SAC downloaded metadata file and click to Upload button: Now, login to your SAC tenant with admin privileges and navigate to System/Administration/ Security folder.Ĭlick on Edit connection and choose SAML Single Sign-On: You need to upload SAC SAML2 metadata into WSO2 IS Service Provider definition. Select folder Inbound Authentication Configuration folder and click to Configure Select Add in Service Provider folder from WSO2 IS Identity Server home pageĮnter your Service Provider name and description and select Register It has to be changed as soon as possible.Īt this step, we are going to create a WSO2 IS Service Provider for SAC. The first time, default password is admin. Then, before starting any Service Provider setup, please check host name in WSO2 IS Server Home page.įrom your preferred browser, open the WSO2 admin console url:

Warning : If you do not set Host Name accessible from SAP Analytics Cloud, metadata will mention localhost by default… To complete setup do not forget to change default IdP settings to be in Production configuration by clicking on WSO2 Deploying Identity Server in Production. To Install and setup WSO2 Identity Server, please refer to documentation by clicking on WSO2 Installation & Prerequisite.įor this PoC, I have installed WSO2 IS on Linux Ubuntu 16.04 LTS 64-bit and set adequate network settings to enable access from User Browser. Setup of WSO2 Identity Server Installation & prerequisites

Create an html page with embedded story and test.Disable X-FRAME-OPTIONS in IDP Tomcat Server.Creating a web page with iFrame and SAC story.The setup of SSO between SAP Analytics Cloud and WSO2 IS is divided into 3 main steps: By choosing WSO2 IS, I am able to customize my authentication page and show how you can set suitable X-FRAME-OPTIONS in Tomcat Server. We will address specific settings of SAC URL API, Single Sign-on with SAML2 federation in the context of embedded Story in an iFrame.įor this proof of concept (PoC), I did with a french customer, I used the Open Source application WSO2 Identity Server (WSO2 IS) as Identity Provider (IdP) to configure SAML2 Single Sign-on with SAP Analytics Cloud.Įmbedding SAC story in an iFrame requires to control ClickJacking Protection of IdP authentication page and SAML2 posting. This blog post is intended to help customers and partners using SAP Analytics Cloud (SAC) to embed story into Corporate Web site.

-d setup wso2