SAP Knowledge Base Article - Public

3508786 - Is it possible to use X.509 Certificate to access Datasphere's database via HANA DB Explorer?

Symptom

  • You would like to know if it is possible to access the SAP HANA Database Explorer or the SQL Console, from the SAP Datasphere tenant via x.509 Client Certificate or Single Sign On (SSO) authentication methods. 
  • Note, you have already authenticated to the SAP Datasphere tenant.
  • You may see these options in a pop-up, when already logged on and authenticated to the Datasphere tenant, you then attempt to open the Database Explorer.

Environment

SAP Datasphere

Reproducing the Issue

  1. Logon to the SAP Datasphere tenant.
  2. Go to any Space. 
  3. Scroll down to the Database Users section and select a user.
  4. Hit the Open Database Explorer button.




  5. When the SAP HANA Database Explorer opens a pop-up appears which shows authentication options for SSO and X.509.


Cause

This is currently a limitation in the functionality, only Basic Authentication is supported to move from the SAP Datasphere tenant to the SAP HANA Cloud database. 
The pop-up is specific to the underlying SAP HANA Cloud database which does allow x.509 for other clients. 
Note: this is a completely separate piece of functionality to the Connections options, some of which do support x.509 certificate authentication. 

Resolution

  1. Basic Authentication is the only supported authentication method to access Datasphere's HANA Cloud database via HANA Database Explorer.
    This is also valid for Database analysis users.
  2. If you wish to have this feature developed in the future, refer to the attached KBA 3332382 How to create an enhancement request for SAP Datasphere?, for details on how you can go about this.

See Also

Keywords

Security requirement, Client certificate authentication, DS, authenticate, logon, login, access , KBA , DS-SEC , Security (Users, Roles) , Problem

Product

SAP Datasphere 1.0