SAP HANA Cloud Platform

Technical Documentation PUBLICSAP HANA Cloud PlatformDocument Version: 1.27.0 - 2014-04-03

SAP HANA Cloud Platform

Table of Contents1 SAP HANA Cloud Platform. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41.1 Product Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

1.1.1 Services. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61.1.2 UI Development Toolkit for HTML5 (SAPUI5). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 211.1.3 Product Prerequisites and Restrictions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

1.2 Accounts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 231.2.1 Getting an Account. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 231.2.2 Managing Accounts and Quota. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 291.2.3 Assigning Members to Accounts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .301.2.4 Managing Subscriptions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 311.2.5 Accessing Services. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

1.3 SAP HANA Development. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 321.3.1 Getting Started. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 331.3.2 Using a Productive SAP HANA Instance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .421.3.3 Using a Trial SAP HANA Instance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67

1.4 Java Development. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 791.4.1 Getting Started. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 801.4.2 Runtime for Java. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1061.4.3 Developer's Guide. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1121.4.4 Operator's Guide. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 533

1.5 UI Development with SAPUI5. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5721.5.1 Installing SAPUI5. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5731.5.2 Getting Started with SAPUI5. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5771.5.3 Concepts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6221.5.4 Initializing and Loading SAPUI5. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6421.5.5 Models and Data Binding. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6651.5.6 Building the UI. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7061.5.7 Structuring SAPUI5 Applications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7611.5.8 Translating SAPUI5 Applications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7851.5.9 Extending SAPUI5 Applications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7901.5.10 Building Mobile Applications with SAPUI5. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7971.5.11 Programming and API . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8501.5.12 References. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 861

1.6 Cockpit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8981.7 Console Client. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 901

1.7.1 Using the Console Client Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9011.7.2 Exit Codes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9031.7.3 Console Client Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 906

1.8 API Documentation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 996

2P U B L I C 2014 SAP AG or an SAP affiliate company. All rights reserved.

SAP HANA Cloud PlatformTable of Contents

1.9 Glossary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 996

SAP HANA Cloud PlatformTable of Contents

P U B L I C 2014 SAP AG or an SAP affiliate company. All rights reserved. 3

1 SAP HANA Cloud PlatformGetting Started What's new

Get your free developer accountSet up the tools and SDKCreate a HelloWorld application

Release NotesHighlight: Developing SAP HANA XS Applications

What's in Resources

CockpitDevelopment Environment [page 113]UI Development Toolkit for HTML5 (SAPUI5) [page 21]Services [page 6]HANAJava

Developer's Guide [page 112]Operator's Guide [page 533]API documentationVideos [page 999]Download this documentation as PDF

1.1 Product OverviewSAP HANA Cloud Platform is an in-memory cloud platform based on open standards. It provides access to a feature-rich, easy-to-use development environment in the cloud. The platform includes a comprehensive set of services for integration, enterprise mobility, collaboration, and analytics.SAP HANA Cloud Platform enables customers and partners to rapidly build, deploy, and manage cloud-based enterprise applications that complement and extend your SAP or non-SAP solutions, either on-premise or on-demand.As a Platform-as-a-Service operated by SAP, our product frees you from any infrastructure and IT costs and offers state-of-the art quality of service - availability, scalability, multitenancy.

Application development

Developers can build highly scalable applications using one of the following programming models:


SAP HANA Cloud PlatformSAP HANA Cloud Platform

Java EE - SAP HANA Cloud Platform is Java EE 6 Web Profile certified. You can develop Java EE applications just like for any application server. You can also easily run your existing Java applications on the platform.

SAP HANA - you can use the SAP HANA development tools to create comprehensive analytical models and build applications with SAP HANA programmatic interfaces and integrated development environment.

Runtime container for applications

Applications developed on SAP HANA Cloud Platform run in a modular and lightweight runtime container. The platform provides a secure, scalable runtime environment with reusable platform services.

Integration with SAP and non-SAP software

SAP HANA Cloud Platform facilitates secure integration with on-premise systems running software from SAP and other vendors. Using the platform services, such as the connectivity service, applications can establish secure connections to on-premise solutions, enabling integration scenarios with your cloud based applications.

In-memory persistence

SAP HANA Cloud Platform includes persistence powered by SAP HANA, taking full advantage of its real-time, in-memory computing technology and built-in analytics.

Secure data

Comprehensive, multilevel security measures have been built into SAP HANA Cloud Platform. This security is engineered to protect your mission critical business data and assets and to provide the necessary industry standard compliance certifications.

Free trial

You can start by getting a free SAP HANA Cloud Platform developer license on SAP HANA Cloud Platform Developer Center that also gives you access to our community and all the free technical resources, tutorials, blogs, support you need.

Related Information

Java Development [page 79]



SAP HANA Development [page 32]With SAP HANA Cloud Platform, you can use the SAP HANA development tools to create comprehensive analytical models and build applications with SAP HANA's programmatic interfaces and integrated development environment.

Services [page 6]SAP HANA Cloud Platform Developer CenterSAP Application Development Partner Center

1.1.1 Services

Overview

SAP HANA Cloud Platform provides the following services:

Service DescriptionConnectivity Service SAP HANA Cloud Platform connectivity service provides a

secure, reliable and easy-to-consume access to business systems, running either on-premise or in a cloud. SAP HANA Cloud provides a trusted channel to your business systems, while at the same time your IT has complete control and auditability of what is technically exposed to the on-demand world.

Persistence Service SAP HANA Cloud Platform persistence service provides in-memory and relational persistence. All maintenance activities, such as data replication, backup and recovery, are handled by the platform.

Document Service SAP HANA Cloud Platform document service provides a content repository for unstructured or semi-structured content. Applications access it using the OASIS standard protocol Content Management Interoperability Services (CMIS). The applications consume the service using the provided client library.

Identity Service SAP HANA Cloud Platform identity service is responsible for identity management and authentication on SAP HANA Cloud. It also enables Single Sign-On (SSO) between applications running on SAP HANA Cloud, based on the Security Assertion Markup Language (SAML) 2.0. It has already more than 2.5 million users which could access applications hosted on SAP HANA Cloud.



Service DescriptionFeedback Service SAP HANA Cloud Platform feedback service provides

developers, customers, and partners with the option to collect end user feedback for their applications. The feedback service also delivers detailed text analysis of user sentiment (positive, negative, or neutral). The feedback service consists of a client API exposed through the HTTPS REST protocol and of administration and analysis user interface.The feedback service is a beta functionality and is available on the SAP HANA Cloud Platform trial landscape.

NoteApplications using features or services in beta state cannot be deployed to productive SAP HANA Cloud Platform accounts. Beta features and services can be tested with the free developer account, which you can request on http://hanatrial.ondemand.com .

1.1.1.1 Connectivity ServiceOverview

SAP HANA Cloud Platform connectivity service allows a secure, reliable, and easy-to-consume access to remote services running either on the Internet or in an on-premise network. This service: Consists of a Java API that application developers can use to consume remote services. Allows account-specific configuration of application connections via HTTP and Mail destinations. Offers a technical connectivity solution, which can be used to establish a secure tunnel from the customer

network to an on-demand application in SAP HANA Cloud Platform. At the same time, the customer IT department has full control and auditability of what is technically exposed to the on-demand world.

Allows you to make connections to both Java and ABAP on-premise systems.



General Internet Connectivity On-Demand to On-Premise Connectivity

Sending and Fetching E-Mail

A company that uses SAP HANA Cloud Platform has been granted an account on the platform to which only authorized users of the company have access. The company can subscribe applications to its account or deploy its own applications, and those applications can then be used in this account. The administrator of the Cloud connector can set up a secure tunnel from the customer network to his or her account. The platform ensures that the tunnel can be only used by the account applications. This means that applications of other accounts have no access to the tunnel. The tunnel itself is encrypted via transport layer security so that connection privacy can be guaranteed.

Features

The connectivity service supports the following protocols relevant for both Java and SAP HANA development: HTTP Protocol - this protocol enables you to exchange data between your on-demand application and on-

premise systems or internet services. For this aim, you can create and configure HTTP destinations to make the needed Web connections. For on-premise connectivity, you can reach backend systems using the Cloud connector via HTTP.

Mail Protocols - the SMTP protocol allows you to send electronic mail messages from your Web applications using e-mail providers that are accessible on the Internet, such as Google Mail (Gmail). The IMAP and POP3 allow you to retrieve e-mails from the mailbox of your e-mail account. Applications use the standard javax.mail API. The e-mail provider and e-mail account are configured using mail destinations.

RFC Protocol - this protocol enables you to invoke ABAP function modules. You can create and configure RFC destinations as well as make connections to back-end systems using the Cloud connector via RFC.



SAP HANA Development

You can create XS destinations for connecting your HANA XS applications to Internet and on-premise services. For more information, see Connectivity for SAP HANA XS [page 53].

Java Development

Use the connectivity service for the following Java scenarios: Consume a service from the Internet. More information: Using Internet Services in Cloud Applications [page

215] Make connections between Web applications and on-premise backend services via HTTP protocol. More

information: Using On-Premise Back-End Services in Cloud Applications [page 223] Make connections between Web applications and on-premise backend services via RFC protocol. More

information: Tutorial: Invoking ABAP Function Modules in On-Premise ABAP Systems [page 248] Establish connections from on-premise systems to SAP HANA Cloud Platform, using the Cloud connector.

More information: SAP HANA Cloud Connector [page 162] Send and fetch e-mails. More information: Sending and Fetching E-Mail [page 256]

Restrictions

For the on-demand to on-premise connectivity scenario, the currently supported protocols are HTTP(S) and RFC. Also, the Destination API must be used to make calls through SAP HANA Cloud connector.

Each SAP HANA Cloud Platform account can be connected to one Cloud connector only. A single Cloud connector can expose an arbitrary number of back-end systems.

For Internet connectivity scenarios, you can use any HTTP clients, as the usage of HTTP Destinations is just an option. The HTTP proxy used in SAP HANA Cloud Platform is set on JVM level.

For Internet connections, you are allowed to use the following ports in URLs: 1080; 1443; 21000; 44300; 44305; 50000; 50001; 50013; 50900; 51000; 8081; 8101; 8111; 8443; 9013.For on-demand to on-premise solutions there are no port limitations.

You can use destination configuration files with extension .props, .properties, .jks, and .txt, as well as files with no extension.

If a destination configuration consists of a key store or trust store, it must be stored in JKS files with a standard .jks extension.

To develop a JCo application, your SDK version needs to be at least, respectively, 1.29.18 (SDK Java Web), or 2.11.6 (SDK for Java EE 6 Web Profile). Also, your SDK local runtime needs to be hosted by a 64-bit JVM, on a x86_64 operating system (Microsoft Windows OS, Linux OS or Mac OS X).On Windows platforms, you need to install Microsoft Visual C++ 2010 Redistributable Package (x64). To download this package, go to http://www.microsoft.com/en-us/download/details.aspx?id=14632 .



To check all software and hardware prerequisites for working with Cloud connector 2.x, see Prerequisites (2.x) [page 164].

To use a connectivity tunnel via RFC destinations, your Cloud connector version needs to be at least 2.11.16.

You cannot communicate with an e-mail provider via an unencrypted SMTP protocol on port 25. Fetched e-mail is not scanned for viruses. Sending e-mail with attachments using javax.activation.DataHandler works with SAP HANA Cloud Platform

SDK for Java EE 6 Web Profile. Mail destinations can only be configured on application level. That is, configuration on a subscription or

customer account level is not supported.

Related Information

Connectivity for SAP HANA XS [page 53]

Sending and Fetching E-Mail [page 256]SAP HANA Cloud Connector [page 162]Consuming the Connectivity Service [page 128]

1.1.1.2 Persistence ServiceThe persistence service makes available both in-memory and relational database storage to applications that are hosted on the SAP HANA Cloud Platform. It handles not only the JDBC connection parameters, such as URLs, drivers, and users, but also performs other tasks such as backup and recovery (24x7), load balancing, and scaling.The persistence service supports the SAP HANA database and SAP MaxDB (relational persistence), as shown in the high-level overview below:



SAP HANA Development

For productive use, a dedicated SAP HANA instance is available as a hosted solution and allows you to work with SAP HANA in the same way as with an on-premise version. There are some obvious restrictions, such as no access to the operating system. A shared SAP HANA instance, on the other hand, available on a trial basis, provides a managed environment in which additional restrictions apply to ensure user and data isolation. The main differences are outlined below: Productive SAP HANA instance

A database instance reserved for your exclusive use. Only your applications run on this database platform.

Full control of user management (as with an on-premise system) Includes the use of the SAP HANA XS Administration Tool and SAP HANA Web-based Development

Workbench Trial SAP HANA instance

A shared database instance. Your SAP HANA packages (and therefore your data) might be distributed across different database instances.

Developers have limited access rights. You use predefined scripts to grant additional rights and privileges.



Java Development

The persistence service supports JPA (Java Persistence API) and JDBC (Java Database Connectivity), with the recommended programming model being JPA 2.0, with EclipseLink as the persistence provider.It provides the following: A dedicated database user and schema per application: When an application is first deployed, the persistence

service automatically creates a dedicated database user and schema on one of the database instances within the persistence service database pool.

Application redeployment with the same schema: Provided the schema has not been dropped, a redeployed application can reuse the schema with its associated database objects and data.

Shared schemas: Allow data to be shared between applications Multiple schemas: Allow multiple databases to be used in parallel Local test facility: On the local runtime, the persistence service automatically enables an embedded Apache

Derby database and configures the default data source accordingly. You can reconfigure the persistence service to replace the standard database with a database of your choice.

Restrictions

When consuming the persistence service in your Java applications, you need to be aware of the following restrictions: No database abstraction

The persistence service does not provide database abstraction for the supported database types (SAP MaxDB and the SAP HANA database). Applications must be aware of the type of database they use and must be written, if necessary, in a database-specific way.

No automatic life cycle management for database objectsThe persistence service does not provide automatic life cycle management for database objects, such as tables, indices, sequences, and so on. It is the responsibility of the application to create the necessary database objects, either by using JDBC to send the corresponding data definition statements to the database or by using the schema creation capabilities of EclipseLink. Due to limitations of the EclipseLink schema creation feature, changes to the schema, like altering a table definition, need to be done by the application. Alternatively, open source tools for database schema management (like Liquibase) can be used for life cycle management for database objects, but must be bundled with the application.

No external access to SAP MaxDBAt present, the database can only be accessed from within the application using JDBC (or JPA). It is therefore not possible to use external data administration tools to manage the application data.

Restrictions with the SAP HANA databaseAn application using the SAP HANA database is automatically assigned a schema and a (technical) user in the SAP HANA database. All communication from the application to the SAP HANA database is done on behalf of this technical user, which can neither be accessed nor changed by the application. The technical user has only the lowest privileges (the default PUBLIC role). For example, it cannot create SAP HANA users or roles in the SAP HANA database.



Related Information

Consuming the Persistence Service [page 282]SAP HANA Development [page 32]

With SAP HANA Cloud Platform, you can use the SAP HANA development tools to create comprehensive analytical models and build applications with SAP HANA's programmatic interfaces and integrated development environment.

1.1.1.3 Document ServiceThe SAP HANA Cloud Platform document service (document service) provides an on-demand content repository for unstructured or semi-structured content.

Overview

Applications access it using the OASIS standard protocol Content Management Interoperability Services (CMIS). Java applications running on SAP HANA Cloud Platform can easily consume the document service using the provided client library. A JavaScript client library is currently being developed. Since the document service is exposed using a standard protocol, it can also be consumed by any other technology that supports the CMIS protocol.

Features

The document service is an implementation of the CMIS standard and is the primary interface to a reliable and safe store for content on SAP HANA Cloud Platform.Features of the document service include: The storage and retrieval of files, which the file system often handles on traditional platforms. The organization of files in a hierarchical folder structure. The association of metadata with the content and the ability to read and write metadata. A query interface based on this metadata using a query language similar to SQL. Managing access control (access control lists). Versioning of content. A powerful Java API (Apache Chemistry OpenCMIS). Streaming support to also handle large files efficiently Files are always encrypted (AES-128) before they are stored in the document service. A virus scanner can be activated to scan files for viruses during file uploads (write accesses). For performance

reasons, read-only file accesses are not scanned. Access from applications running internally on SAP HANA Cloud Platform or externally.The following figure illustrates the document service's architecture:



The CMIS standard defines: A domain model and service bindings that can be used by applications to work with a content management

repository. An abstraction layer for controlling diverse document management systems and repositories using Web

protocols.CMIS provides a common data model covering typed files and folders with generic properties that can be set or read. There is a set of services for adding and retrieving documents (called objects). CMIS defines an access control system, a checkout and version control facility, and the ability to define generic relations. CMIS defines the following protocol bindings, which use WSDL with Simple Object Access Protocol (SOAP) or Representational State Transfer (REST): The Atom Publishing (AtomPub) Protocol The JavaScript Object Notation (JSON) formatThe consumption of CMIS-enabled document repositories is easy using the Apache Chemistry libraries. Apache Chemistry provides libraries for several platforms to consume CMIS using Java, PHP, .Net, or Python. The subproject OpenCMIS, which includes the CMIS Java implementation, also includes tools around CMIS, like the CMIS Workbench, which is a desktop client for CMIS repositories for developers.Since the SAP HANA Cloud Platform document service API includes the OpenCMIS Java library, applications can be built on SAP HANA Cloud Platform that are independent of a specific content repository.In the coding and the coding samples, ecm is used to refer to the document service.



Restrictions

The following features, which are defined in the OASIS CMIS standard, are supported with restrictions: Versioning: Only major versions are supported Versioning: No support for check-in comments Query: Only metadata searches, no joins and no type aliases getContentStream: Offset and length not yet supportedThe following CMIS features are not yet supported: Multifiling Policies Relationships Change logsThere is a limit for the properties of a document: For searchable properties, a maximum of 100 values with a maximum of 5,000 characters is allowed. For non-searchable properties, a maximum of 1,000 values with a maximum of 50,000 characters is allowed.

Related Information

Consuming the Document Service [page 366]Use the SAP HANA Cloud Platform document service to store unstructured or semi-structured data in the context of your SAP HANA Cloud Platform application.

Creating a Sample Application [page 372]OASIS Page on CMISOASIS Page with link to CMIS-v1.1pdfApache Chemistry Page

1.1.1.4 Identity Service

Overview

To enable you to seamlessly integrate SAP HANA Cloud Platform applications with existing on-premise identity management infrastructures, SAP HANA Cloud Platform introduces single sign-on (SSO) and identity federation features. In SAP HANA Cloud Platform, identity information is provided by identity providers (IdP), and not stored on SAP HANA Cloud Platform itself. You can have a different IdP for each account you own, and this is configurable using the Cockpit.The following graphic illustrates the high-level architecture of identity management in SAP HANA Cloud Platform.



If you don't have a corporate identity management infrastructure, you can use SAP ID Service. It is the default identity provider for SAP HANA Cloud Platform, and you can use it out of the box, without having to configure SSO and identity federation.SAP HANA Cloud Platform also allows you to implement applications protected with the OAuth protocol.Scenarios Identity federation with the corporate identity provider SAP HANA Cloud Platform applications can delegate authentication and identity management to an existing corporate IdP that can, for example, authenticate your company's employees. It aims at providing a simple and flexible solution: your employees (or customers, partners, and so on) can single sign-on with their corporate user credentials, without a separate user store and account in SAP HANA Cloud Platform. All information required by SAP HANA Cloud Platform about the employee can be passed securely with the logon process, based on a proven and standardized security protocol. There is no need to manage additional systems that take care for complex user account synchronization or provisioning between the corporate network and SAP HANA Cloud Platform. Only the configuration of already existing components on both sides is needed, which simplifies administration and lowers total cost of ownership significantly. Even existing applications can be federation-enabled without changing a single line of code.The following graphic illustrates this scenario.



You need to configure trust at several levels: Configuring the service provider of your account in SAP HANA Cloud Platform Configuring trust on SAP HANA Cloud Platform to the corporate IdP Configuring trust on the corporate IdP to SAP HANA Cloud PlatformDefault identity federation with SAP ID ServiceSAP ID service is the place where you have to register to get initial access to SAP HANA Cloud Platform. If you are a new user, you can use the self-service registration page . SAP ID Service manages the SAP Community Network users, SAP Service Marketplace users and the users of several other SAP sites. If you already have such a user, then you are already registered with SAP ID Service.In addition, you can use SAP ID Service as an identity provider for your identity federation scenario, or if you do not want to use identity federation.Trust to SAP ID Service is pre-configured on SAP HANA Cloud Platform by default, so you can start using it without further configuration. Optionally, you can configure additional trust settings, such as service provider registration, role assignments to users and groups, and so on.SAP ID service provides an easy way for your applications to delegate authentication and identity management and keep developers focused on the business logic. It allows authentication decisions to be removed from the application and handled in a central service.SAP ID service consists of the following main components: A central user store for all your identities that require access to protected resources of your application(s) A standards-based Single Sign-On (SSO) service that enables users to log on only once and get seamless

access to all your applications deployed using SAP HANA Cloud PlatformThe following graphic illustrates the identity federation with SAP ID Service scenario.



Managing RolesRoles allow you to control the access to application resources in SAP HANA Cloud Platform, as specified in Java EE. In SAP HANA Cloud platform, you can assign groups or individual users to a role. Groups are collections of roles that allow the definition of business-level functions within your account. They are similar to the actual business roles existing in an organization.The following graphic illustrates a sample scenario for role, user and group management in SAP HANA Cloud Platform. It shows a person, John Doe, with corporate role: sales representative. On SAP HANA Cloud Platform, all sales representatives belong to group Sales, which has two roles: CRM User and Account Owner. On SAP HANA Cloud, John Doe inherits all roles of the Sales group, and has an additional role: Administrator.

Protecting applications with OAuthOAuth is a widely adopted security protocol for protection of resources over the Internet. It is used by many social network providers and by corporate networks. It allows an application to request authentication on behalf of users with third-party user accounts, without the user having to grant its credentials to the application. SAP HANA Cloud Platform provides an API for developing OAuth-protected applications. You can configure the required scopes and clients using the Cockpit.



The following graphic illustrates protecting applications with OAuth on SAP HANA Cloud Platform.

Related Information

Securing Applications [page 414]

1.1.1.5 Feedback ServiceThe SAP HANA Cloud Platform feedback service (feedback service) provides developers, customers, and partners with the option to collect end user feedback for their applications. In addition, the feedback service provides predefined analytics on the collected feedback data - feedback rating distribution and detailed text analysis of user sentiment (positive, negative, or neutral).

NoteThis document relates to Beta functionality available on SAP HANA Cloud Platform for developer accounts.

The feedback service has three components: Feedback service client API that collects feedback data Administration - the feedback service user interface (UI) for administering feedback collection and feedback

quota Analysis - the feedback service UI for analyzing and exporting collected feedback dataThe Analysis UI leverages the SAP HANA analytics and text analysis capabilities. Feedback data is stored in the SAP HANA DB.To be able to operate in Administration and Analysis, you need to assign the following roles to your user: FeedbackAdministrator FeedbackAnalyst



Once you have a developer account for the SAP HANA Cloud Platform, you are automatically suibscribed and can use the feedback service.For more information about assigning the required roles, open the Consuming the Feedback Service link in the Related Links section.In Administration, the administrator adds the applications for which feedback is to be collected. As a result, the developer can use the client API to consume the feedback service.Once the feedback service is consumed by the application and feedback data is collected, the feedback analyst can explore feedback text analysis in Analysis. As a result, a developer can use end user feedback to improve the performance and appearance of the specific application.

Architecture

The feedback service is operated by SAP HANA Cloud Platform and leverages the in-memory technology of the SAP HANA DB.

Related Information

Consuming the Feedback Service [page 402]

Getting Feedback for Applications [page 566]



1.1.2 UI Development Toolkit for HTML5 (SAPUI5)The UI development toolkit for HTML5 (SAPUI5) is a user interface technology that is used to build and adapt client applications.The SAPUI5 runtime is a client-side HTML5 rendering library with a rich set of standard and extension controls. It provides a lightweight programming model for desktop as well as mobile applications.Based on JavaScript, it supports RIA like client-side features. SAPUI5 complies with OpenAjax and can be used together with standard JavaScript libraries. It supports CSS3, which allows you to adapt themes to your company's branding in an effective manner. It is based on an extensibility concept regarding custom controls. It uses the open source jQuery library as a foundation

SAPUI5 SDK

The SDK comes together with a Demo Kit, which contains: A Developer Guide with a summary of valuable information around the used programming languages, open

source technologies, development tools and APIs A Controls section containing running demo examples with descriptions and source codes API Reference with JavaScript documentation of Framework and Control API Test Suite which shows all controls running with different property settings where you can interactively adapt

the controls you use for your test purpose.

Restrictions

SAPUI5 control sap.ui.richtexteditor.RichTextEditorThe RichTextEditor contains a third party component TinyMCE provided by Moxiecode Systems AB. The SAP license agreement does not cover development of own applications with RichTextEditor of SAPUI5. To develop own applications with RichTextEditor of SAPUI5 a customer or partner has to first obtain an appropriate license from Moxiecode Systems AB. To prevent accidental usage, the TinyMCE code cannot be used directly.

Related Information

UI Development with SAPUI5 [page 572]

1.1.3 Product Prerequisites and Restrictions



General Constraints

SAP HANA Cloud Platform has Java SE 6 and Java SE 7 Hotspot compatible JVM and supports bytecode compiled in Java SE 6 and Java SE 7 Hotspot format.

Upload limit: the size of an application deployed on SAP HANA Cloud Platform can be up to 1.5 GB. If the application is packaged as a WAR file, the size of the unzipped content is taken into account.

Language support: you can develop and run applications on the platform, which supports any set of languages. The documentation and the user intefaces (UI) of the platform itself are only available in English.

SAP HANA Cloud Platform Tools

SAP HANA Cloud Platform Tools for Java and SDK have been tested on Windows 7 (64 bit) with Java Standard Edition 6 (Java SE 6).

SAP HANA Cloud Platform Tools for Java and SDK run fine in many operating environments with Java SE 6 and Java SE 7 that are supported by Eclipse. However, we do not systematically test all platforms.

SAP HANA Cloud Platform Tools for Java must be installed on Eclipse IDE for Java EE developers. To be able to deploy your application in a customer account, you have to use SAP HANA Cloud Platform Tools

version 0.24.4.3 or higher. For JCo-enabled applications, the SDK local runtime needs to be hosted by a 64-bit JVM.For the specific requirements for the platform development tools, SDK, Cloud connector, SAP JVM, see https://tools.hana.ondemand.com/#cloud

Browser Support

For UIs of the platform itself, such as the SAP HANA Cloud Platform Cockpit, the following browsers are supported on Microsoft Windows PCs and where mentioned below on Mac OS X:

Browser VersionsMicrosoft Internet Explorer 9 and upwardsMozilla FireFox Extended Support Release (ESR) and latest versionGoogle Chrome Latest versionSafari 5.1 and upwards (for Mac OS X only)

If you are developing an SAPUI5 application, for the list of supported browsers see Browser and Platform Matrixes [page 606].If you are developing an application using another UI technology, you can support any browsers you want.



Services

You can find the restrictions related to each SAP HANA Cloud Platform service in the respective service documentation: Connectivity Service [page 7] Persistence Service [page 10] Document Service [page 13]

Accounts

For more information about the limitations of each type of account (developer, customer, partner), see Account Types [page 24]

1.2 AccountsSAP HANA Cloud Platform provides free and paid accounts, the capability to create additional accounts on a self-service basis, and a member management feature for setting up teams.

Related Information

Getting an Account [page 23]To deploy applications on SAP HANA Cloud Platform, you need an account. The platform offers three types of accounts: developer, customer and partner account.

Managing Accounts and Quota [page 29]In the Account tab in the cockpit, you can find details about your currently selected account, create new accounts and assign compute unit quota to them.

Assigning Members to Accounts [page 30]All members assigned to an account can use the functionality provided by SAP HANA Cloud Platform within the scope of this account.

1.2.1 Getting an AccountTo deploy applications on SAP HANA Cloud Platform, you need an account. The platform offers three types of accounts: developer, customer and partner account.For more information how to get each type of account and what is the difference between them, see the links below.



Related Information

Signing Up for a Developer Account [page 26]A developer account offers you access to the trial landscape for an unlimited period and is free of charge. You are restricted to one developer account.

Purchasing a Customer Account [page 27]A customer account allows you to host productive, business-critical applications with 24x7 support.

Joining the Partner Program [page 28]A partner account enables you to build applications and to sell them to your customers.

Account Types [page 24]SAP HANA Cloud Platform offers three types of accounts: developer, customer, and partner accounts. The account type determines pricing, conditions of use, resources, services available, and landscape host. Each account is associated with a region, which represents the location of the data center used by that account.

1.2.1.1 Account TypesSAP HANA Cloud Platform offers three types of accounts: developer, customer, and partner accounts. The account type determines pricing, conditions of use, resources, services available, and landscape host. Each account is associated with a region, which represents the location of the data center used by that account.While developer accounts use the trial landscape, which is located in Europe only, customer and partner accounts use a production landscape, which is available on a regional basis. The specific landscape associated with an account is relevant when you deploy applications (landscape host) and access the SAP HANA Cloud Platform cockpit (cockpit URL).The main features of each account type are described below.

Developer Account Customer Account Partner Account

Use case A developer account allows you to explore the basic SAP HANA Cloud Platform functionality for a non-committal and unlimited period. Access is open to everyone.

A customer account allows you to host productive, business-critical applications with 24x7 support.You can purchase a customer account just like any other SAP software.

A partner account enables you to build applications and to sell them to your customers.

Benefits Free of charge Self-service registra

tion Unlimited period Automatic access to

SAP HANA Cloud Portal, SAP Mobile Platform, and Gateway as a Service

Support for productive applications

It includes SAP Application Development licenses to enable you to get started with scenarios across cloud and on-premise applications. It also offers the opportunity to certify applications and receive SAP partner logo package with usage policies.



Developer Account Customer Account Partner Account

Partners can advertise and sell applications via the SAP Store. This option is not included in the other accounts.

Services available Productive and beta services

Productive services Productive services

Limitations You can only run one application

Only 1 GB of database storage

Only 1 GB of document storage

Only one user per account

Resources according to your contract

Predefined resources according to your partner package. More can be purchased if there is a need.

Registration For information about how to register, see Signing Up for a Developer Account [page 26].

Via the SAP store or an SAP sales representative. For inquiries, use the SAP HANA Cloud Platform Developer Center .

To join the partner program, sign up at the SAP Application Development Partner Center .

Landscape host hanatrial.ondemand.com Europe: hana.ondemand.com

United States: us1.hana.ondemand.com

Europe: hana.ondemand.com

United States: us1.hana.ondemand.com

Support Developer Community Developer Community

Customer message in SAP Online Service System (OSS). Please see the SAP Note 1888290

for a list of appropriate OSS components (requires login to SAP Service Marketplace, that is, an S-User).

Developer Community

Customer message in SAP Online Service System (OSS). Please see the SAP Note 1888290

for a list of appropriate OSS components (requires login to SAP Service Marketplace, that is, an S-User).

Related Information

Landscape Hosts [page 484]



Applications can be deployed on the production landscape hana.ondemand.com or the trial landscape hanatrial.ondemand.com.

Cockpit [page 898]The cockpit is the central point for managing all activities associated with your account and for accessing key information about your applications. It allows you to manage all applications deployed in your account from a single dedicated Web-based user interface.

1.2.1.2 Signing Up for a Developer AccountA developer account offers you access to the trial landscape for an unlimited period and is free of charge. You are restricted to one developer account.

Context

You are advised to first get a developer account and then download and set up the tools. When prompted for login credentials, we recommend that you use your e-mail address as your login identifier.

Procedure

1. Go to the SAP HANA Cloud Platform landing page (https://account.hanatrial.ondemand.com).2. Depending on whether or not you already have an SAP ID user, proceed as follows:

You already have an SAP ID user StepsNo: Register with the SAP ID service and create a developer account

1. Click Register:

2. On the registration screen, enter the required data and click Register.A dialog box appears informing you that you will be sent an e-mail with a link to activate your account.

3. Go to your e-mail account and activate your developer account.A dialog box appears confirming that your developer account has been activated.

4. Click Continue.

Yes: Sign in and create a developer account 1. Click Log On and sign in with your SAP ID or SCN credentials:



You already have an SAP ID user Steps

2. Read and accept the SAP HANA Cloud Developer Edition License Agreement.

3. Enter your login details for SAP HANA Cloud Platform and click Log On.4. On the account creation screen, click Create Account.

Note The name of your developer account comprises your user ID and the suffix trial, for example,

p1234567trial. Developer accounts are intended for personal exploration, and not for use in a production environment

or for team development. You cannot assign members to the account (you will not see the Members list normally available).

A developer account has only one virtual machine (VM) at its disposal. You can deploy multiple applications, but you can start only one application at any one time.

Applications will be stopped automatically after a certain period of time for cleanup purposes. When deploying to the cloud, remember to use the SAP HANA Cloud Platform landscape host

hanatrial.ondemand.com.

Related Information


Landscape Hosts [page 484]Applications can be deployed on the production landscape hana.ondemand.com or the trial landscape hanatrial.ondemand.com.

1.2.1.3 Purchasing a Customer AccountA customer account allows you to host productive, business-critical applications with 24x7 support.When you want to purchase a customer account, you can select from a set of predefined packages and get them from SAP HANA Marketplace .



In addition, you can upgrade and refine your resources later on. You can also contact your SAP sales representative and opt for a configuration, tailored to your needs.After you have purchased your customer account, you will receive an e-mail with a link to the landing page of SAP HANA Cloud Platform.

Related Information


Joining the Partner Program [page 28]A partner account enables you to build applications and to sell them to your customers.


1.2.1.4 Joining the Partner ProgramA partner account enables you to build applications and to sell them to your customers.To become a partner, you need to fill in an application form and then sign your partner contract. You will be assigned to an account with the respective resources. To apply for the partner program, visit https://www.sapappsdevelopmentpartnercenter.com/en/signup/new/ . You will receive a welcome mail with further information afterwards.General information about the partner program is available on https://www.sapappsdevelopmentpartnercenter.com/en/get-started/cloud-applications/ .

Related Information


Purchasing a Customer Account [page 27]A customer account allows you to host productive, business-critical applications with 24x7 support.




1.2.2 Managing Accounts and QuotaIn the Account tab in the cockpit, you can find details about your currently selected account, create new accounts and assign compute unit quota to them.The following details about your account are available: Account name - a unique identifier of the account over the cloud that is automatically generated when the

account is created. You use this account name as a parameter for the console client commands. Display name - a custom name that you can specify for your account and change it later on, if necessary. This

way you can distinguish more easily your accounts in case you have more than one. Date and time when your account was created.In the Account Management section, you can view your purchased compute unit quota, assign it to accounts, create new accounts and assign quota to them. The total compute unit quota, as well as the already assigned and free quota is visually represented. For more information about compute units, see Compute Units [page 112].To assign or remove quota from an account, choose the Edit button below the respective account from the list and then use the "+" and "-" buttons next to quota types to set the desired amount. Note that you can manage quota only for accounts you have created.To create a new account, choose New Account... and specify a display name. You can assign quota during account creation the same way as described above. You are automatically assigned as a member of the newly created account.To delete an account, choose the Delete button below the respective account. Note that you can delete only the accounts you have created and you cannot delete the initial account created upon your first logon to the SAP HANA Cloud Platform.You can also manage accounts and quota using commands in the SAP HANA Cloud Platform console client. For more information, see the Related Information section.

Related Information

create-account [page 911]Creates a new account with an automatically generated unique ID as account name and the specified display name and assigns the user as an account owner. The user is authorized against the existing account passed as --account parameter.

delete-account [page 915]Deletes a particular account. Only the user who has created the account is allowed to delete it.

list-accounts [page 947]Lists all accounts that a customer has. Authorization is performed against the account passed as --account parameter.

set-quota [page 978]Sets compute unit quotas for a given account.

Compute Units [page 112]Using Multiple Accounts for Staged Application Development [page 562]

SAP HANA Cloud Platform allows you to achieve isolation between the different application life cycle stages (development, testing, productive) by using multiple accounts.



Multitenant Applications [page 522]With SAP HANA Cloud Platform you can develop and run multitenant (tenant-aware) applications, that is, applications running on a shared compute unit that can be used by multiple consumers (tenants). Each consumer accesses the application through a dedicated URL.

1.2.3 Assigning Members to AccountsAll members assigned to an account can use the functionality provided by SAP HANA Cloud Platform within the scope of this account.

Context

Note the following points about account members: A user may be assigned to more than one account. Account members are not distinguished by their role (for example, developer, IT administrator, or application

operator). Members can perform all operations associated with an account.

Procedure

1. Open the cockpit and choose Members in the navigation area.All members currently assigned to the account are displayed in a list.

2. To add a new member, enter their user ID in the Add Member field and then choose the Add button. The user ID is case-insensitive and must contain alphanumeric characters only. Note that there is currently no user validation.The user is added to the list of team members and automatically has the permissions required to access the cockpit for this account as well as perform all operations associated with the account, irrespective of the tool used (cockpit, Eclipse IDE, console client, SAP HANA studio).

TipYou can request user IDs at the SAP Service Marketplace: https://websmp102.sap-ag.de/request-user

3. To delete a member, choose the Delete button in the relevant row. To delete multiple members, select the relevant rows and choose the Delete Selected Members button.

NoteEvery member of the team is allowed to delete any member contained in the account member list except themselves.



Related Information


1.2.4 Managing SubscriptionsDisplay an overview of your account's current subscriptions and remove those you no longer require.

Context

You can list all applications to which your account is subscribed using the cockpit (described below) or console client.

Procedure

1. Open the cockpit and choose Subscriptions in the navigation area. The subscriptions are listed with the following information: The account name of the application provider from which the subscription was obtained Name of the application Application URLs allowing you to directly launch the application

2. To unsubscribe the account from an application, choose the Unsubscribe button in the relevant row.

Related Information


list-subscribed-applications [page 962]Removes the subscription to a provider application from a consumer account

Providing Multitenant Applications to Tenants for Testing [page 564]Using the console client, you can create accounts and subscribe them to applications to test how applications can be provided to multiple consumers.



1.2.5 Accessing ServicesDisplay an overview of all services to which you, as an account member, have access.

Context

The services currently available are the following: SAP HANA Cloud Portal SAP Mobile Platform, enterprise edition, cloud version HCI OData Provisioning Feedback Service

Procedure

Open the cockpit and choose Services in the navigation area. A list is displayed of all services that you are authorized to access.

Related Information


Feedback Service [page 19]The SAP HANA Cloud Platform feedback service (feedback service) provides developers, customers, and partners with the option to collect end user feedback for their applications. In addition, the feedback service provides predefined analytics on the collected feedback data - feedback rating distribution and detailed text analysis of user sentiment (positive, negative, or neutral).

1.3 SAP HANA DevelopmentWith SAP HANA Cloud Platform, you can use the SAP HANA development tools to create comprehensive analytical models and build applications with SAP HANA's programmatic interfaces and integrated development environment.SAP HANA Cloud Platform supports the following: Creation of SAP HANA schemas and repository packages. Your SAP HANA instances and XS applications are

visualized in the cockpit.



Eclipse-based tools for connecting to your SAP HANA instance on SAP HANA Cloud Platform Use of SAP HANA studio features for SAP HANA development:

Building SQLScript data-intensive application logic Building analytic models Building XS applications Using SAP HANA embedded search capabilities Leveraging SAP HANA functional libraries like SAP HANA Business Function Library (BFL) and the SAP

HANA Predictive Analytics Library (PAL)

Related Information

Getting Started [page 33]Set up your SAP HANA development environment and run your first application in the cloud.

Using a Productive SAP HANA Instance [page 42]SAP HANA Cloud Platform provides SAP HANA instances designed for developing with SAP HANA in a production environment.

Using a Trial SAP HANA Instance [page 67]SAP HANA Cloud Platform provides SAP HANA instances that allow you to develop with SAP HANA in a trial environment.

1.3.1 Getting StartedSet up your SAP HANA development environment and run your first application in the cloud.

Sign Up

You first need to sign up for an SAP HANA Cloud Platform account. See Getting an Account [page 23].

Set Up

See Installing SAP HANA Tools for Eclipse [page 34].

Create Your First Application

Create a simple application and run it in the cloud. See Creating an SAP HANA XS Application [page 35].



Add Features

Use calculation views and visualize the data with SAPUI5. See 8 Easy Steps to Develop an XS application on the SAP HANA Cloud Platform .

Samples

A set of sample applications shows how HANA XS this functionality can be used to develop function-rich applications. See Samples [page 41].

1.3.1.1 Installing SAP HANA Tools for Eclipse Before developing your SAP HANA XS application, you need to download and set up the necessary tools.

Context

The procedure below will guide you how to install the following tools and features: A 64-bit version of Eclipse IDE Tools for developing SAP HANA applications Toolkit for connecting to SAP HANA systems operated on SAP HANA Cloud Platform Optional but helpful: Sample applications for SAP HANA Cloud Platform Optional: Tools for developing SAPUI5 applications

Procedure

1. Download and install a 64-bit version of Eclipse Kepler (4.3). To do that, go to Eclipse IDE for Java EE Developers .

2. Configure your proxy settings. To do that, see Installing SAP Development Tools for Eclipse [page 84] step 3.

3. In the Eclipse IDE, choose Help Install New Software .4. In the Work with field, enter https://tools.hana.ondemand.com/kepler and press ENTER.5. From the list of development features, select:

From SAP HANA Cloud Platform Tools: Sample Applications for SAP HANA Cloud Platform Feature SAP HANA Cloud Platform Tools for Connecting to SAP HANA Systems



UI development toolkit for HTML5 (Developer Edition) (required for UI development with SAPUI5) SAP HANA Tools (the whole feature group)

6. Choose Next.7. On the next wizard page, you get an overview of the features to be installed. Choose Next.8. Confirm the license agreements.9. Choose Finish to start the installation.10. After the successful installations, you will be prompted to restart your Eclipse IDE.

Next Steps

Creating an SAP HANA XS Application [page 35]

1.3.1.2 Creating an SAP HANA XS ApplicationThis tutorial explains how to create a simple SAP HANA XS application that is written in server-side JavaScript and displays the "Hello World" message together with a string extracted from a table in the SAP HANA database.

Prerequisites

You have installed the tools as described in Installing SAP HANA Tools for Eclipse [page 34].

Context

In this tutorial, you complete the following steps:1. Trial SAP HANA instance only: Create an SAP HANA development package.2. Use the Eclipse IDE to access an SAP HANA instance.3. Create a subpackage.4. Create a repository workspace.5. Create an XS project.6. Create the following files:

Application descriptor (.xsapp): Marks the root point in the package hierarchy from which content can be served. It is a prerequisite to develop and deploy an application on SAP HANA Extended Application Services (SAP HANA XS).

Application access file (.xsaccess): Determines whether or not package content can be exposed and specifies the authentication method to be used to grant access.

Application privileges file (.xsprivileges): Defines the privileges required to access an application. Role (.hdbrole): Contains the defined application privileges.



7. Create the application JavaScript file (file extension XSJS)8. Grant the user the role required to access the application9. Productive SAP HANA instance only: Configure SAML authentication10. Open the application from the cockpitThe following example data is used: Account: i12345trial User: I12345 SAP HANA Cloud Platform landscape: hanatrial.ondemand.comReplace the above with your own account and user names. If you have a productive SAP HANA instance, replace hanatrial.ondemand.com with the appropriate landscape host, for example, hana.ondemand.com.

1. Create an SAP HANA Root PackageThis step is required if you use a trial SAP HANA instance. For a productive SAP HANA instance, you can use any SAP HANA package.

Procedure

1. Log on to the SAP HANA Cloud cockpit:https://account.hanatrial.ondemand.com

The HANA XS Applications page is displayed by default.2. To create a package, choose the New Package button at the top of the HANA XS Applications (Grouped by

HANA Package) panel.3. In the empty New Package section in the lower half of page, enter the package name myhanaxs (or another

name of your choice) and select the database HANA XS.4. Save your entries.

For more information, see Creating a Trial SAP HANA Instance [page 68].

2. Connect to an SAP HANA Instance

Context

To make a connection to an SAP HANA instance, you need to use a classic Eclipse IDE (Kepler version) with the relevant SAP HANA tools installed on it. To learn how to do that, see the following links, depending on your use case (productive or trial): Connecting to a Productive SAP HANA Instance via the Eclipse IDE [page 52]



Connecting to a Trial SAP HANA Instance via the Eclipse IDE [page 74]

3. Create a SubpackageProcedure

1. In the SAP HANA Studio, open the SAP HANA Development perspective.2. In the SAP HANA Systems view, select the Content/i12345trial/myhanaxs node.3. From the context menu, choose New Package .

The New Package dialog box appears.4. In the Name field, i12345trial.myhanaxs. is already entered. Add the new package name (for example,

"hello") to the end of the full package path: i12345trial.myhanaxs.hello5. Click in the Description field to automatically copy across the package name.6. Choose OK to confirm.

The new subpackage hello is added to the package hierarchy below the myhanaxs package.

4. Create a Repository WorkspaceProcedure

1. In the SAP HANA Repositories view, choose the Create Repository Workspace button.2. If your SAP HANA system is not listed in the SAP HANA System list, choose the Add System button and add

it to the list. If you have more than one SAP HANA system, make sure that the applicable system is selected under SAP HANA System.

3. Enter the workspace name myhanaxs. In this example, the workspace name is the same as the root package name.

4. In the Workspace Root field, browse to select the folder that will contain the workspace you create in this step. The tutorial uses C:\HANAXSws.

5. Choose Finish.The workspace appears in the SAP HANA Repositories view. A folder has also been added to your local file system: C:\HANAXSws\myhanaxs. It will contain all your development files.



5. Create an XS Project

Procedure

1. In the Project Explorer view, choose File New Project SAP HANA Application DevelopmentXS Project and then choose Next.

2. Enter the project name. In this example, it is called hello.3. Deselect the Use default location checkbox.4. Browse to select the path C:\HANAXSws\myhanaxs\i12345trial\myhanaxs\hello.

Note that this path must match that specified in the previous section.5. Open the context menu of the hello folder and choose Team Share Project .6. Choose SAP HANA Repository and under Repository Workspaces select the repository workspace you

created in section 4 above.7. Choose Finish.

6. Create the Application Descriptors and Role

Procedure

Application descriptora) In the Project Explorer view, select the hello project and choose File New File .b) Enter the file name .xsapp and choose Finish.

Note that the file name is just a file extension and that the file does not have any content. Application access file

a) In the Project Explorer view, select the hello project and choose File New File .b) Enter the file name .xsaccess and choose Finish.

Note that the file name is just a file extension.c) Copy the following code into the .xsaccess file and save:

{"exposed" : true,"default_file": "hello.xsjs"}

This configuration determines that the application will be exposed in the Internet via HTTPS. Although no authentication is specified, all SAP HANA XS applications on a trial SAP HANA instance use SAML2. For the productive SAP HANA instance, SAML will be enabled in a later step. Application users will then be authenticated by the SAP ID service.

Application privileges filea) In the Project Explorer view, select the hello project and choose File New File .



b) Enter the file name .xsprivileges and choose Finish.Note that the file name is just a file extension.

c) Copy the following code into the .xsprivileges file and save:

{ "privileges" : [ { "name" : "Basic", "description" : "Basic usage privilege" } ]}

Rolea) In the Project Explorer view, select the hello project and choose File New File .b) Enter the file name model_access.hdbrole and choose Finish.c) Copy the following code into the file:

role ::model_access { application privilege: ::Basic;}

d) Replace with the SAP HANA package where the project is shared. For the trial SAP HANA instance, it should look something like this: i12345trial.myhanaxs.hello. Then save the file.

7. Create the JavaScript File

Procedure

1. In the Project Explorer view, select the hello project and choose File New File .2. Enter the file name hello.xsjs and choose Finish.3. Copy the following JavaScript code into the file and save:

$.response.contentType = "text/html";var output = "Hello, " + $.session.getUsername() + " ";var conn = $.db.getConnection();var pstmt = conn.prepareStatement( "SELECT CURRENT_USER FROM DUMMY" );var rs = pstmt.executeQuery();if (!rs.next()) { $.response.setBody( "Failed to retrieve data" ); $.response.status = $.net.http.INTERNAL_SERVER_ERROR;}else { output = output + "This is the response from my SQL. The current user is: " + rs.getString(1);}rs.close();pstmt.close();conn.close();$.response.setBody(output);

The code does the following: Opens a connection to the database Prepares and runs an SQL statement on the system table DUMMY, which returns as a response the

current user. Adds the results to the response so that it can be displayed in the Web browser



4. To activate the files in the SAP HANA repository, select the files and from the context menu choose TeamActivate .The application is now running on the XS engine.

8. Grant the Role to the User

To enable other users to access your application, you need to grant them the model_access role that you created in section 6.

Procedure

Trial SAP HANA instancea) In the Systems view, select your system and from the context menu choose SQL Console.b) In the SQL console, enter the following, replacing with your user:

call "HCP"."HCP_GRANT_ROLE_TO_USER"('i12345trial.myhanaxs.hello::model_access', '')

c) Execute the procedure. You should see a confirmation that the statement was successfully executed. Productive SAP HANA instance

a) In the Systems view, expand Security Users and then double-click your user ID.b) On the Granted Roles tab, choose the + (Add) button.c) Select the model_access role in the list and choose OK. The role is now listed on the Granted Roles tab.d) Choose Deploy in the upper right corner of screen. A message confirms that your user has been modified.

Note(Relevant for Trial landscape only) If you refactor existing SAP HANA database views or create new ones on your Trial account, you need to refactor/recreate them in the _SYS_BIC schema instead of your account-specific schema.

9. Enable SAML

Enable SAML if you are using a productive SAP HANA instance. Otherwise, you can omit this step.



Procedure

1. Start the SAP HANA XS Administration Tool: https://./sap/hana/xs/admin/

2. On the XS Applications page, select your application in the tree on the left.3. In the SECURITY panel, make sure that the Public (no authentication required) radio button is not selected.

To make changes, choose Edit.4. In the AUTHENTICATION panel, choose Edit, then select SAML in the dropdown box and SAPID in the SAML

Identity Provider field.5. Save your settings.

10. Test Your ApplicationProcedure

Open the cockpit and proceed as described in: Productive SAP HANA instance: Launching SAP HANA XS Applications [page 48] Trial SAP HANA instance: Launching SAP HANA XS Applications [page 69]You will be authenticated by SAML and should then see a text similar to the following:

Hello, i12345,This is the response from my SQL. The current user is: i12345

1.3.1.3 Samples

You can easliy import SAP HANA XS sample applications in your Eclipse IDE and deploy them on your SAP HANA schema and package on SAP HANA Cloud Platform (Productive or Trial landscape).

Prerequisites

You have installed Sample Applications for SAP HANA Cloud Platform Feature and the SAP HANA Tools package. For more information, see Installing SAP HANA Tools for Eclipse [page 34].

Running the Enterprise Procurement Model (EPM) Sample Application

1. Grant the following role to the user who will acces it: .epm_sample.roles::model_access



2. From the SQL console, execute the following statement:

CALL "HCP"."HCP_GRANT_ROLE_TO_USER"('.epm_sample.roles::model_access', '')

3. In the cockpit, go to section HANA XS Applications.4. Select your SAP HANA XS application, and click on the epm_sample application URL to open it in the Web

browser.

Running the SAP HANA Interactive Education (SHINE) Application

SHINE is a demo application that makes it easy to learn how to build SAP HANA applications. The demo application comes complete with sample data and design-time developer objects for the application's database tables, data views, stored procedures, OData, and user interface.1. Grant the role .shine.data::model_access to your application (SAP ID service) user.2. From the SQL console, execute the following statement:

CALL "HCP"."HCP_GRANT_ROLE_TO_USER"('.shine.data::model_access', '')

3. The SHINE sample application has an administration UI that allows sample data generation. To access the administration UI, execute the following statement in the SQL console:

CALL "HCP"."HCP_GRANT_ROLE_TO_USER"('.shine.data::model_admin', '')

4. Select your SAP HANA XS application, and click on the shine application URL to open it in the Web browser.To access the admin UI from your shine application URL, replace the following part from the URL:/shine/ui/poworklist/WebContent/poWorklist.htmlwith/shine/admin/ui/WebContent/admin.html

1.3.2 Using a Productive SAP HANA Instance

SAP HANA Cloud Platform provides SAP HANA instances designed for developing with SAP HANA in a production environment.

Performance/Scalability Recommendation

Before going live with an application for which a significant number of users and/or significant load is expected, you should do a performance load test. This is best practice in the industry and we strongly recommend it for HANA XS applications.



Prerequisites

You have an account on the production landscape. For more information, see Purchasing a Customer Account [page 27].

Features

A productive SAP HANA instance provides you with a database instance reserved for your exclusive use, allowing you to work with SAP HANA as with an on-premise system. You have full control of user management and can use a range of tools. There are some obvious restrictions, such as no access to the operating system. See the overview below for details about available features:

Feature Description

Database users Specifics for SAP HANA Cloud Platform: Guidelines for Creating Database Users [page 44] Creating Your Database User [page 45]

Web-based tools SAP HANA Web-based Development Workbench SAP HANA XS Administration ToolSee: Developing with SAP HANA Web-based Tools [page 46] Roles Required for Web-based Tools [page 47] SAP HANA Developer Guide

Eclipse Installing SAP HANA Tools for Eclipse [page 34] Connecting to a Productive SAP HANA Instance via the Eclipse IDE [page

52]

Security Choice of authentication methodSee: Configuring SAML 2.0 Authentication [page 62] SAP HANA Administration Guide

Connectivity destinations Connectivity for SAP HANA XS [page 53] SAP HANA Developer Guide

Monitoring Configuring an Availability Check to Monitor Your SAP HANA XS Application [page 49]

Debugging SAP HANA Web-based Development WorkbenchSee: Debugging with SAP HANA Web-based Development Workbench [page 51]

Supported by the SAP HANA Tools plugin for Eclipse as of release 7.4.



Feature Description

Launch SAP HANA XS applications

Launching SAP HANA XS Applications [page 48]

User management You have full administration privileges to manage usersSee: SAP HANA Administration Guide SAP HANA Security Guide

1.3.2.1 Guidelines for Creating Database Users

To create database users that will be recognized by SAP HANA Cloud Platform, you first need to assign all members of your development team to your account. Then each individual account member can create their own database user.

Assign Members to Your Account

Open the cockpit on the production landscape and proceed as described in Assigning Members to Accounts [page 30].

Create Database Users

Each member of your account has to create their own SAP HANA database user. So that the database user can be recognized by SAP HANA Cloud Platform, it should be created with the database user feature in the cockpit, as described in Creating Your Database User [page 45].

Users and Passwords

As an account member, you will be assigned a database user with extensive rights, including system administration and monitoring. The user ID is identical to your SCN user, and the password shown is an initial password and must be changed when you log onto one of the SAP HANA tools for the first time. You are responsible for choosing a strong password and keeping it secure.



Roles

Your database user is initially assigned a minimal set of roles, which includes HCP_PUBLIC, HCP_SYSTEM, and PUBLIC. The HCP_SYSTEM role contains the ROLE ADMIN system privilege, allowing you to grant additional roles to your own and other database users.Note that the initial set of roles also contains the sap.hana.xs.ide.roles::Developer role, allowing you to work with the SAP HANA Web-based Development Workbench. It does not, however, contain the roles required to work with the SAP HANA XS Administration Tool (sap. hana.xs.admin.roles), but you can assign these yourself.

Related Information

Roles Required for Web-based Tools [page 47]To use the SAP HANA Web-based tools, you require specific roles. Database users are, by default, created with the HCP_PUBLIC, HCP_SYSTEM, and PUBLIC roles, as well as the sap.hana.xs.ide.roles::Developer role. Grant additional roles to your own and other database users, as necessary.

1.3.2.2 Creating Your Database User

Use the database user feature provided in the cockpit to create your own database user for your productive SAP HANA instance.

Procedure

1. Log onto the cockpit on the production landscape and choose HANA XS Applications.2. If you have more than one productive SAP HANA instance, select the relevant SAP HANA instance from the

dropdown box in the Database field.3. In the Development Tools section, click Database User.

In the dialog box that appears, a message confirms that you do not yet have a database user.4. Choose Create User.

Your user (identical to your SCN user) and initial password are displayed. You must change the initial password when you first log onto a SAP HANA tool, such as the SAP HANA Web-based Development Workbench.Note that your database user is assigned a minimal set of roles. This allows you to log onto the SAP HANA Web-based Development Workbench, but not the SAP HANA XS Administration tool.

5. To log onto the SAP HANA Web-based Development Workbench and change your initial password now (recommended), copy your password and then close the dialog box.



NoteYou do not have to change your initial password immediately. You can open the dialog box again later to display both your database user and initial password. Since this poses a potential security risk, however, you are strongly advised to change your password as soon as possible.

6. In the Development Tools section, click Web-based Development Workbench.7. On the SAP HANA logon screen, enter your database user and initial password.8. Change your password when prompted. You are responsible for choosing a strong password and keeping it

secure. SAP cannot provide forgotten passwords.

Related Information

Roles Required for Web-based Tools [page 47]To use the SAP HANA Web-based tools, you require specific roles. Database users are, by default, created with the HCP_PUBLIC, HCP_SYSTEM, and PUBLIC roles, as well as the sap.hana.xs.ide.roles::Developer role. Grant additional roles to your own and other database users, as necessary.

SAP HANA Developer Guide

1.3.2.3 Developing with SAP HANA Web-based ToolsSAP HANA Cloud Platform supports the following Web-based tools: SAP HANA Web-based Development Workbench and SAP HANA XS Administration Tool.

Prerequisites

You have a database user. For more information, see Creating Your Database User [page 45]. Your database user is assigned the roles required for the SAP HANA Web-based Development Workbench:

sap.hana.xs.ide.roles sap.hana.xs.debugger::Debugger

Your database user is assigned the roles required for the SAP HANA XS Administration Tool: sap.hana.xs.admin.roles

For more information about roles, see Roles Required for Web-based Tools [page 47].

Context

For ease of use, the cockpit allows you to directly open the SAP HANA Web-based Development Workbench and SAP HANA XS Administration Tool from the HANA XS Applications panel. This allows you to switch between development and configuration tasks, as well as launch applications directly from the application list:



SAP HANA Web-based Development WorkbenchIncludes an all-purpose editor tool that enables you to maintain and run design-time objects in the SAP HANA Repository. It does not support modeling activities.Available at the following URL: https://./sap/hana/xs/ide/

SAP HANA XS Administration ToolAllows you, for example, to configure security options and HTTP destinations.Available at the following URL: https://./sap/hana/xs/admin/

Procedure

1. Log onto the cockpit on the production landscape and choose HANA XS Applications.2. If you have more than one productive SAP HANA instance, select the relevant SAP HANA instance in the

Database field.3. Click the appropriate link:

Administration Tools section: SAP HANA XS Administration Development Tools section: SAP HANA Web-based Development Workbench

4. Log on with your database user. If this is your initial logon, you will be prompted to change your password. You are responsible for choosing a strong password and keeping it secure.

Related Information

SAP HANA Developer GuideSAP HANA Administration Guide

1.3.2.4 Roles Required for Web-based ToolsTo use the SAP HANA Web-based tools, you require specific roles. Database users are, by default, created with the HCP_PUBLIC, HCP_SYSTEM, and PUBLIC roles, as well as the sap.hana.xs.ide.roles::Developer role. Grant additional roles to your own and other database users, as necessary.

Role DescriptionSAP HANA Web-based Development Workbench

sap.hana.xs.ide.roles::EditorDeveloper or parent role sap.hana.xs.ide.roles::Developer

Use the Editor component of the SAP HANA Web-based Development Workbench.

sap.hana.xs.debugger::Debugger Debug server-side JavaScript codeSAP HANA XS Administration Tool

sap.hana.xs.admin.roles::HTTPDestViewer View HTTP destinations.

SAP HANA Cloud PlatformSAP HAN

SAP HANA Cloud Platform

Documents

Transcript of SAP HANA Cloud Platform