Symptom
- You would like to know if it is possible to access the SAP HANA Database Explorer or the SQL Console, from the SAP Datasphere tenant via x.509 Client Certificate or Single Sign On (SSO) authentication methods.
- Note, you have already authenticated to the SAP Datasphere tenant.
- You may see these options in a pop-up, when already logged on and authenticated to the Datasphere tenant, you then attempt to open the Database Explorer.
Environment
SAP Datasphere
Reproducing the Issue
- Logon to the SAP Datasphere tenant.
- Go to any Space.
- Scroll down to the Database Users section and select a user.
- Hit the Open Database Explorer button.
- When the SAP HANA Database Explorer opens a pop-up appears which shows authentication options for SSO and X.509.
Cause
This is currently a limitation in the functionality, only Basic Authentication is supported to move from the SAP Datasphere tenant to the SAP HANA Cloud database.
The pop-up is specific to the underlying SAP HANA Cloud database which does allow x.509 for other clients.
Note: this is a completely separate piece of functionality to the Connections options, some of which do support x.509 certificate authentication.
Resolution
- Basic Authentication is the only supported authentication method to access Datasphere's HANA Cloud database via HANA Database Explorer.
This is also valid for Database analysis users. - If you wish to have this feature developed in the future, refer to the attached KBA 3332382 How to create an enhancement request for SAP Datasphere?, for details on how you can go about this.
See Also
- SAP Help Create a Database User
- SAP Help Create a Database Analysis User to Debug Database Issues
- SAP Help Database Users
Keywords
Security requirement, Client certificate authentication, DS, authenticate, logon, login, access , KBA , DS-SEC , Security (Users, Roles) , Problem
Product
SAP Datasphere 1.0