Analysis For Office

transcript

Analysis For Office on BIPAllstate 6/9/2017

Server stats

• There are three Business Objects environments at Allstate• External access for Allstate exclusive agents

• External access for Encompass agents

• Internal access for the whole enterprise

• All three environments on BI version 4.2 SP3 patch 3

• Analysis for Office version 2.3

• This is only for the Enterprise Business Objects deployment

What is Analysis for Office

• Microsoft Office Add-In (Excel and PowerPoint)

• Premium version of BEx Analyzer

• Allows multidimensional analysis of OLAP sources• SAP NetWeaver BW • SAP HANA• MS Cubes

• Integrates with both BW Netweaver and BI Platform (requires plugin to be installed and configured)

• Can be scheduled from the BIP when SSO between BO and SAP is setup

How is it accessed Locally?

• Microsoft Office is a pre-requisite• It’s a plugin for office

• Will show up as a new header within Excel and PPT

How is it installed on the BIP?

• The plugin should be installed on processing servers (follow SAP best practices to install)

• Post Installation Configuration (setting up SSO for scheduling from the BIP)• Generate keystore

• This file will be used by BO and SAP to setup SSO from BO to SAP

• Generate certificate with keytool• Used keytool from the command prompt to generate certificate

• Once generated the CERT.der file must be uploaded into SAP system

How is it installed on the BIP? (continued)

• Import certificate into SAP BW• Binary import cert.der into SAP BW with STRUSTSSO2

• Log into SAP BW and run STRUSTSSO2

• Make sure that cert.der is imported Binary into System PSE

• Add the certificate to the certificate list

• Add the certificate to ACL

• CMC Configuration• As an Admin go to Authentication -> SAP

• Setup Entitlement Systems (NOTE YOU NEED A BW ACCOUNT WITH ACCESS TO IMPORT ROLES – see appendix)

• Import Roles• From the Role Import Tab select the roles to import and click update (see

appendix)

• SAP Authentication• Ensure Enable SAP Authentication is checked on the Options Tab

• Import keystore file in the CMC• Scroll down on the options tab and upload the keystore.p12 file using the

browse button.

• Enter in the system ID we defined in earlier steps

• Enter the password alias we defined earlier

• Ensure Security Token Service is running• Go to the Adaptive processing server and ensure the service is running

• Note: If the service is not running, stop the APS and add the Security Token Service, then start the APS

• Update the adaptive Job server• Scroll down within the adaptive job server where the analysis plugin was

installed and enter the path for the BiPrecalculation.exe file

• Note: By default it is located here: C:\SAP BusinessObjects\Analysis Precalculation\BiPrecalculation.exe

• Check properties of the user• A SAP alias can now be used that is associated with other authentication

types making access to BW from BO seamless to the user.

Protection Finance - Reporting COE

• Produced most of the standardized reports that go out form PF• Over 200 reports on a monthly basis

• 3 teams • Business Intelligence / Build

• Data Delivery

• Validation

Analysis for Office (AFO)

• Replacing FDW(SAP BW)• Faster

• Scheduling

• Intuitive interface – Pivot table

• Hopefully triggering• https://ideas.sap.com/D39461

• Challenges• Takes time to convert

• Getting Scheduling into production

How we use Analysis for Office

• Currently it is just the reporting COE

• We have been converting workbooks to AFO • Currently have to run them manually…. but not for long

• Replace out current process• Plan to have all reports that are run manually on FDW(SAP BW) scheduled

• Time savings and reallocation of resources

Regular Webi Scheduling

Analysis for Office Scheduling

Please Vote for Triggeringhttps://ideas.sap.com/D39461

Questions

Matthew MorelliProtection Financematt.morelli@allstate.com

Aly KheraniBusiness Intelligence COEaly.Kherani@allstate.com

Appendix

How is it installed on the BIP?

• The plugin should be installed on processing servers (follow SAP best practices to install)

• The prerequisites are as follows:• Admin Rights

• Use a supported version of BI Platform

• MS .NET framework 4.5+

• 64 bit OS

• A running adaptive job server

Post Installation Configuration (setting up SSO for scheduling from the BIP)• Generate keystore

• This file will be used by BO and SAP to setup SSO from BO to SAP

Run the PKCS12Tool program from command prompt

Example: "D:\SAP BusinessObjects\SAP BusinessObjects Enterprise XI 4.0\win64_x64\sapjvm\bin\java" -jar PKCS12Tool.jar -alias BOPRD -storepass Xxxxxx -dname CN=CMS_NAME )storepass: the password needed to open the keystore. Use a secure password.CN=palmtree: defines the name of the BO server. If you a BO server whose name is BO4, use CN=BO4

Screen shots

Keystore file is generated at the below location

Generate certificate with keytool

• Used keytool from the command prompt to generate certificate

• Example: D:\SAP BusinessObjects\SAP BusinessObjects Enterprise XI 4.0\win64_x64\sapjvm\bin\keytool" -exportcert -keystorekeystore.p12 -storetype pkcs12 -file cert.der -alias BOPRD

• Once generated the CERT.der file must be uploaded into SAP system

Import certificate into SAP BW

Binary import cert.der into SAP BW with STRUSTSSO2Log into SAP BW and run STRUSTSSO2

Import certificate into SAP BW Cont.

Make sure that cert.der is imported Binary into System PSE

• Add the certificate to the certificate list

• Add the certificate to ACL

CMC Configuration

• As an Admin go to Authentication -> SAP

• Setup Entitlement Systems as seen to the right (NOTE YOU NEED A BW ACCOUNT WITH ACCESS TO IMPORT ROLES)

Import Roles

• From the Role Import Tab select the roles to import and click update as seen to the right

SAP Authentication

• Ensure Enable SAP Authentication is checked on the Options Tab

Import keystore file to the CMC

• Scroll down on the options tab and upload

the keystore.p12 file using the browse

button.

• Enter in the system ID we defined in earlier

• Enter the password alias we defined earlier

Ensure Security Token Service is running

• Go to the Adaptive processing server and ensure the service is running

Note: If the service is not running, stop the APS and add the Security Token Service, then start the APS

Update the adaptive Job server

• Scroll down within the adaptive job server where the analysis plugin was installed and enter the path for the BiPrecalculation.exe file

By default it is located here: C:\SAP BusinessObjects\Analysis Precalculation\BiPrecalculation.exe

Check properties of the user

• A SAP alias can now be used that is associated with other authentication types making access to BW from BO seamless to the user.

Protection Finance

• Have matt talk about how great this new tool is compared to BEx

• Have Matt discuss how PF will use this tool

Analysis For Office

Documents