31
Analysis For Office on BIP Allstate 6/9/2017
Analysis For Office on BIPAllstate 6/9/2017
Server stats
• There are three Business Objects environments at Allstate• External access for Allstate exclusive agents
• External access for Encompass agents
• Internal access for the whole enterprise
• All three environments on BI version 4.2 SP3 patch 3
• Analysis for Office version 2.3
• This is only for the Enterprise Business Objects deployment
What is Analysis for Office
• Microsoft Office Add-In (Excel and PowerPoint)
• Premium version of BEx Analyzer
• Allows multidimensional analysis of OLAP sources• SAP NetWeaver BW • SAP HANA• MS Cubes
• Integrates with both BW Netweaver and BI Platform (requires plugin to be installed and configured)
• Can be scheduled from the BIP when SSO between BO and SAP is setup
How is it accessed Locally?
• Microsoft Office is a pre-requisite• It’s a plugin for office
• Will show up as a new header within Excel and PPT
How is it installed on the BIP?
• The plugin should be installed on processing servers (follow SAP best practices to install)
• Post Installation Configuration (setting up SSO for scheduling from the BIP)• Generate keystore
• This file will be used by BO and SAP to setup SSO from BO to SAP
• Generate certificate with keytool• Used keytool from the command prompt to generate certificate
• Once generated the CERT.der file must be uploaded into SAP system
How is it installed on the BIP? (continued)
• Import certificate into SAP BW• Binary import cert.der into SAP BW with STRUSTSSO2
• Log into SAP BW and run STRUSTSSO2
• Make sure that cert.der is imported Binary into System PSE
• Add the certificate to the certificate list
• Add the certificate to ACL
• CMC Configuration• As an Admin go to Authentication -> SAP
• Setup Entitlement Systems (NOTE YOU NEED A BW ACCOUNT WITH ACCESS TO IMPORT ROLES – see appendix)
How is it installed on the BIP? (continued)
• Import Roles• From the Role Import Tab select the roles to import and click update (see
appendix)
• SAP Authentication• Ensure Enable SAP Authentication is checked on the Options Tab
• Import keystore file in the CMC• Scroll down on the options tab and upload the keystore.p12 file using the
browse button.
• Enter in the system ID we defined in earlier steps
• Enter the password alias we defined earlier
How is it installed on the BIP? (continued)
• Ensure Security Token Service is running• Go to the Adaptive processing server and ensure the service is running
• Note: If the service is not running, stop the APS and add the Security Token Service, then start the APS
• Update the adaptive Job server• Scroll down within the adaptive job server where the analysis plugin was
installed and enter the path for the BiPrecalculation.exe file
• Note: By default it is located here: C:\SAP BusinessObjects\Analysis Precalculation\BiPrecalculation.exe
• Check properties of the user• A SAP alias can now be used that is associated with other authentication
types making access to BW from BO seamless to the user.
Protection Finance - Reporting COE
• Produced most of the standardized reports that go out form PF• Over 200 reports on a monthly basis
• 3 teams • Business Intelligence / Build
• Data Delivery
• Validation
Analysis for Office (AFO)
• Replacing FDW(SAP BW)• Faster
• Scheduling
• Intuitive interface – Pivot table
• Hopefully triggering• https://ideas.sap.com/D39461
• Challenges• Takes time to convert
• Getting Scheduling into production
How we use Analysis for Office
• Currently it is just the reporting COE
• We have been converting workbooks to AFO • Currently have to run them manually…. but not for long
• Replace out current process• Plan to have all reports that are run manually on FDW(SAP BW) scheduled
• Time savings and reallocation of resources
Regular Webi Scheduling
Analysis for Office Scheduling
Questions
Matthew MorelliProtection [email protected]
Aly KheraniBusiness Intelligence [email protected]
Appendix
How is it installed on the BIP?
• The plugin should be installed on processing servers (follow SAP best practices to install)
• The prerequisites are as follows:• Admin Rights
• Use a supported version of BI Platform
• MS .NET framework 4.5+
• 64 bit OS
• A running adaptive job server
Post Installation Configuration (setting up SSO for scheduling from the BIP)• Generate keystore
• This file will be used by BO and SAP to setup SSO from BO to SAP
Run the PKCS12Tool program from command prompt
Example: "D:\SAP BusinessObjects\SAP BusinessObjects Enterprise XI 4.0\win64_x64\sapjvm\bin\java" -jar PKCS12Tool.jar -alias BOPRD -storepass Xxxxxx -dname CN=CMS_NAME )storepass: the password needed to open the keystore. Use a secure password.CN=palmtree: defines the name of the BO server. If you a BO server whose name is BO4, use CN=BO4
Screen shots
Keystore file is generated at the below location
Generate certificate with keytool
• Used keytool from the command prompt to generate certificate
• Example: D:\SAP BusinessObjects\SAP BusinessObjects Enterprise XI 4.0\win64_x64\sapjvm\bin\keytool" -exportcert -keystorekeystore.p12 -storetype pkcs12 -file cert.der -alias BOPRD
• Once generated the CERT.der file must be uploaded into SAP system
Import certificate into SAP BW
Binary import cert.der into SAP BW with STRUSTSSO2Log into SAP BW and run STRUSTSSO2
Import certificate into SAP BW Cont.
Make sure that cert.der is imported Binary into System PSE
Import certificate into SAP BW Cont.
• Add the certificate to the certificate list
Import certificate into SAP BW Cont.
• Add the certificate to ACL
CMC Configuration
• As an Admin go to Authentication -> SAP
• Setup Entitlement Systems as seen to the right (NOTE YOU NEED A BW ACCOUNT WITH ACCESS TO IMPORT ROLES)
Import Roles
• From the Role Import Tab select the roles to import and click update as seen to the right
SAP Authentication
• Ensure Enable SAP Authentication is checked on the Options Tab
Import keystore file to the CMC
• Scroll down on the options tab and upload
the keystore.p12 file using the browse
button.
• Enter in the system ID we defined in earlier
steps
• Enter the password alias we defined earlier
Ensure Security Token Service is running
• Go to the Adaptive processing server and ensure the service is running
Note: If the service is not running, stop the APS and add the Security Token Service, then start the APS
Update the adaptive Job server
• Scroll down within the adaptive job server where the analysis plugin was installed and enter the path for the BiPrecalculation.exe file
By default it is located here: C:\SAP BusinessObjects\Analysis Precalculation\BiPrecalculation.exe
Check properties of the user
• A SAP alias can now be used that is associated with other authentication types making access to BW from BO seamless to the user.
Protection Finance
• Have matt talk about how great this new tool is compared to BEx
• Have Matt discuss how PF will use this tool
