To enable single sign-on (SSO) on SAP BW, you must install and configure software on the computers that run Tableau Server and Tableau Desktop.
IMPORTANT: You must meet specific version and environment requirements to have success enabling SSO for SAP BW. Review this list and ensure that you can meet these requirements before you proceed with configuring Tableau Server and Tableau Desktop for SSO.
Note that there is an SAP license requirement because SAP's Server Side Trust uses SAP's cryptolib for server-to-server communication.
Tableau Desktop
- SAP GUI for Windows 7.40 Core: 50132986_6.zip
- Secure Login Client SAP: SetupSLC06_5-10012580.EXE
Tableau Server
- SAP GUI for Windows 7.40 Core: 50132986_6.zip
- BI 7.0 Addon for SAP GUI 7.40: BI740SP07_700-20012040.EXE or later
- 32-bit SAP Cryptolib:
- SAPCAR_617-80000938.EXE
- SAPCRYPTOLIBP_8433-20011731.SAR
- BWSSOTestTool: Download the latest version of Tableau Connectivity Support Tools (connectivity-support-win32.zip) from https://github.com/tableau/connectivity-support/releases
- "Business Intelligence Platform Administrator's Guide" from the SAP Help Portal
Because of the complexity of most SAP BW environments, we strongly recommend that an SAP engineer participate in the configuration process. Detailed configuration instructions can be found in the following articles on Tableau Community:
- To configure impersonation from Tableau Server to SAP BW using server side trust, see Configuring Delegation from Tableau Server to SAP BW.
- To configure Kerberos authentication from Tableau Desktop to SAP BW, see Configuring Single Sign-On for Tableau Desktop to SAP BW .
Hello,
for "Configuring Delegation from Tableau Server to SAP BW." (DOC-10352 ==>
- Does anyone know what the minimum SAP authorisations are for the user SAPServiceA4H ?
- All tableau sources are pointing out that the SAP versions of above document need to be taken strict to make it work. Are there other observations out there; or best practices with newer versions? Because SAP GUI 7.40 is out of standard maintenance. So if you use it, you are not compliant.
Regs
Ulf