GST

SAP Cloud Integration

On-Boarding
Guide
SLH: DIGITAL COMPLIANCE SERVICE – GSP INTEGRATION SETUP

Contents
Introduction ................................................................................................................................................ 3
Prerequisites................................................................................................................................................ 3
Overview of Roles and Responsibilities ........................................................................................................ 4
Welcome to SAP Cloud Platform Integration!............................................................................................... 4
Step 1: User Management for SAP Cloud Platform Integration ................................................................ 6
1.1 Adding Members ............................................................................................................................ 6
1.2 Defining Authorizations for users ................................................................................................... 6
Step 2: Add Communication User to SAP Cloud Platform cockpit and Assign ESBMessaging.Send Role ..... 8
Step 3: Add Public Certificate of the GSP Provider in SAP Cloud Platform Integration Tenant Key store .... 9
3.1 Login to your tenant system. ...................................................................................................10
3.2 Adding Public Certificate of GSP Provider for SSL Handshake in SAP Cloud Platform Integration
10
Step 4: Testing Outbound Endpoint.........................................................................................................12
Step 5: Copy, Configure, Deploy and Monitor Integration Flow ...............................................................13
5.1 Login to your tenant system ....................................................................................................13
5.2 Configuring Integration Flow ...................................................................................................14
The Content source can be either from Content Catalog or you can also get it from some of the SAP
certified GSP providers. .......................................................................................................................14
5.2.1.1 If Content is available in Content Catalog .............................................................................14
Copying the Integration Package .........................................................................................................14
5.2.1.2 If Integration package Content is Provided by GSP ...............................................................15
Import the Package(zip) ..........................................................................................................................15
5.3 Modify the Configuration parameters as per your GSP Provider and Deploy the Integration Flow .16
Step 6: Testing Incoming Endpoint ..........................................................................................................17
APPENDIX: Moving content between tenants (From Dev/Test to PROD) .................................................18
1) Repeat the steps 1-4 on the PROD tenant........................................................................................18
2) Export the Integration Package from Dev/Test Tenant ....................................................................18
3) Import the Exported package on to the PROD tenant ......................................................................19
4) Execute Steps 5.4(Monitoring the deployed Integration Flow status) and 6 (: Testing Incoming
Endpoint) ................................................................................................................................................19

2
SLH: DIGITAL COMPLIANCE SERVICE – GSP INTEGRATION SETUP

Onboarding to SAP Cloud Platform Integration for “SLH: Digital Compliance Service for India” customers

Introduction

SAP recently released the standard content for SLH: Digital Compliance Service for India in SAP Cloud
Platform Integration. In this blog, I describe all the necessary steps required to onboard to SAP Cloud
Platform Integration to establish the connection between SAP Localization Hub, digital compliance service
for India solution (SLH DCS) and GSP (GST Suvidha Provider) .

Prerequisites

Please make sure that you adhere to the below mentioned prerequisites.

• SAP Localization Hub, digital compliance service for India solution: All the relevant artifacts are
installed in the test and/or productive systems (see note 2460667 for details on how to install and
configure the solution).
• You must have successfully registered with GSP (GST Suvidha Provider) system
- You would have received the following artifacts:
- ASP to GSP Integration/Set up Manual
- GSTN Public key for data encryption
- Public Key from GSP Provider for SSL handshake
(In case if you have not received, Request the GSP Provider to share the Public Key for SSL
Handshake)
• You must have received an email from SAP that contains access details to SAP Cloud Platform
Integration test/productive tenants.
Tips & Tricks
1. In case you have not received this email, most probably, your user id was not mentioned in order
form. Check with your internal team who was involved during contract signing to check which
email-id/S-userid was provided to SAP Account Manager to be mentioned in Order Form
2. Check with SAP Account Manager to confirm on S-userid that was mentioned in the order form.
3. Contact SAP Customer Success Team on the provided email id: saphcphelp@sap.com
4. In case you are still facing issues, raise a ticket using the component LOD-HCI. The SAP Cloud
Operations rations team will look into the issue and provide a solution

3
 SLH: DIGITAL COMPLIANCE SERVICE – GSP INTEGRATION SETUP

Overview of Roles and Responsibilities

Administrator

SAP Cloud Platform cockpit ( e.g: https://account.hana.ondemand.com )

Step 1: Add members and assign roles for SAP Cloud Platform Integration

Step 2: Add Communication User to SAP Cloud Platform cockpit and Assign
ESBMessaging.Send Role

Administrator

SAP Cloud Platform Integration Web UI ( e.g: https://xxxxx-tmn.hci.eu1.hana.ondemand.com/itspaces )

Step 3: Add Public Certificate of the GSP Provider in SAP Cloud Platform
Integration Tenant Key store

Step 4: Test Outbound Endpoint

Integration Developer
SAP Cloud Platform Integration Web UI ( e.g: https://xxxxx-tmn.hci.eu1.hana.ondemand.com/itspaces )

Step 5: Copy, Configure, Deploy and Monitor Integration Flow

Step 6: Test Inbound Endpoint

4
SLH: DIGITAL COMPLIANCE SERVICE – GSP INTEGRATION SETUP

Welcome to SAP Cloud Platform Integration!

Here, I would like to highlight different segments in the Welcome email received from SAP Cloud Platform
Integration that contains details of the tenant. This tenant would be provided with Admin access to the SAP
user id mentioned in the Order Form.

5
SLH: DIGITAL COMPLIANCE SERVICE – GSP INTEGRATION SETUP

Step 1: User Management for SAP Cloud Platform Integration

NOTE: Step 1-4 needs to be performed by the Tenant Administrator

1.1 Adding Members

These steps are also explained in GST specific SAP Cloud Platform on-boarding guide.
a) You need to login to the SAP Cloud Platform Cockpit
( e.g.: https://account.hana.ondemand.com/cockpit ) with the SAP user ID provided in the mail.

b) Navigate to your account as shown below

c) You can Add Members and Assign Roles on this account by navigating to Members -> Add Members

Assign the Administrator role to the user who is supposed to have the full permissions of an
administrator.

Assign the Application User Admin role to the user who is supposed to have restricted administrator
permissions .

1.2 Defining Authorizations for users

a) In the Navigation Pane, Choose Security -> Authorizations.

b) Create a Group, and assign the roles to the group.

6
SLH: DIGITAL COMPLIANCE SERVICE – GSP INTEGRATION SETUP

c) Now assign users to this newly created group

Addition Info:

•You can assign the <AuthGroup.Administrator> role for the administrator at customer side who
administers a (customer-specific) tenant management node.

•You can assign the <AuthGroup.IntegrationDeveloper> role to the user to have permissions to
manage Integration Flows.

For more details, Refer SAP Cloud Platform Integration Documentation

https://help.sap.com/viewer/product/CLOUD_INTEGRATION/Cloud/en-US -> Operations -> Operations
guide for SAP Cloud Platform Integration -> User Management for Cloud Integration -> Managing Users and
Role Assignments -> Overview Of Authorization Groups.

These steps are also explained in GST specific SAP Cloud Platform on-boarding guide.

7
SLH: DIGITAL COMPLIANCE SERVICE – GSP INTEGRATION SETUP

Step 2: Add Communication User to SAP Cloud Platform cockpit and Assign
ESBMessaging.Send Role

The communication between Application Service Provider (ASP) and SAP Cloud Platform Integration is
established through Basic Authentication. This setup can be realized by using Communication User.

You can use SCN users as Communication users for sending messages from ASP to SAP Cloud Platform
Integration tenant.

TIP: I recommend you to use an SCN dialog user as a communication user.

a) Add the communication user to Members in SAP Cloud Platform Cockpit

b) Assign the ESBMessaging.Send role to the communication user.

c) Follow the steps as shown in the screenshot here.

8
SLH: DIGITAL COMPLIANCE SERVICE – GSP INTEGRATION SETUP

Step 3: Add Public Certificate of the GSP Provider in SAP Cloud Platform Integration Tenant
Key store

9
SLH: DIGITAL COMPLIANCE SERVICE – GSP INTEGRATION SETUP

3.1 Login to your tenant system.

a) In your browser, paste the WebUI URL of the tenant as mentioned in the email and a suffix
/itspaces at the end of the URL. (e.g: <Tenant URL>/itspaces).

b) Enter your credentials to login to the application

NOTE: Incase if you are getting HTTP Status 403 error, Contact your Tenant Administrator

3.2 Adding Public Certificate of GSP Provider for SSL Handshake in SAP Cloud Platform Integration
a) Create a New Keystore
Using tools like KeystoreExplorer

• Create a new keystore

• Import the trusted certificates (which you have received from GSP provider) into the
keystore

b) Import Certificates in SAP Cloud Platform Integration

1. Navigate to Monitor->Manage Security->Keystore

10
SLH: DIGITAL COMPLIANCE SERVICE – GSP INTEGRATION SETUP

2. To Add new Key store Entry, Click on Add.

3. Browse and deploy new key store

11
SLH: DIGITAL COMPLIANCE SERVICE – GSP INTEGRATION SETUP

4. You should get a message as shown below. Click OK. You can observe the newly added keystore
entries in the table.

Documentation for this topic is available at

https://help.sap.com/viewer/product/CLOUD_INTEGRATION/Cloud/en-US -> Operations -> Operations

guide for SAP Cloud Platform Integration ->Web-Based Monitoring->Managing Security Material->Managing
Keystore Entries->Adding Keystore Entries.

Further Reading on key store management:

https://blogs.sap.com/2017/06/19/cloud-integration-keystore-monitor-now-available-for-tenant-administrator/

Step 4: Testing Outbound Endpoint

In this section, I would like to discuss how to perform connectivity tests of the GSP Provider by using TLS
Connectivity Test.

a) Navigate to the Connectivity Tests tile by choosing Monitor->Manage Security->Connectivity Tests.

12
SLH: DIGITAL COMPLIANCE SERVICE – GSP INTEGRATION SETUP

b) In the TLS Test Connectivity page, enter the hostname (without https://) and click Send.

c) You should receive Successful response message.

Further reading:
https://blogs.sap.com/2017/06/19/cloud-integration-how-to-setup-secure-outbound-http-connection-using-
keystore-monitor/

Step 5: Copy, Configure, Deploy and Monitor Integration Flow

NOTE: Steps 5 and 6 can be performed by Integration Developer.

5.1 Login to your tenant system

a) In your browser, paste the WebUI URL of the tenant as mentioned in the email and a suffix
/itspaces at the end of the URL. (e.g: <Tenant URL>/itspaces).

13
SLH: DIGITAL COMPLIANCE SERVICE – GSP INTEGRATION SETUP

b) Login to the page with your credentials

NOTE: Incase if you are getting HTTP Status 403 error, Contact your Tenant Administrator

5.2 Configuring Integration Flow

The Content source can be either from Content Catalog or you can also get it from some of the SAP
certified GSP providers.

5.2.1.1 If Content is available in Content Catalog

Copying the Integration Package

a) Choose Discover.

14
SLH: DIGITAL COMPLIANCE SERVICE – GSP INTEGRATION SETUP

b) Click on the package SLH: Digital Compliance Service for India.

If you are unable to locate the package, then you can search for the above package as shown in the
screenshot here.

c) In the upper right corner, choose Copy.This will copy the Integration package to the Design
workspace.

d) Once the copy is successful, You will get “Package copied successfully” message
e) Navigate to Design. You can find the copied package as shown in the screenshot below.

5.2.1.2 If Integration package Content is Provided by GSP

Import the Package(zip)

Import the Integration Package content by following the below mentioned steps

15
SLH: DIGITAL COMPLIANCE SERVICE – GSP INTEGRATION SETUP

5.3 Modify the Configuration parameters as per your GSP Provider and Deploy the
Integration Flow

You need to choose the Integration Flow provided by the GSP system that would like to connect.
Follow the steps below to configure the Integration Flow with your GSP system:
i. Choose Configure

16
SLH: DIGITAL COMPLIANCE SERVICE – GSP INTEGRATION SETUP

ii. Modify all the parameters to establish connection between SAP Cloud Platform
Integration and GSP system based on content guide provided.
iii. Save the configuration and Deploy .

If you are not able to find an Integration Flow corresponding to your GSP System, please connect
with Development team for more guidance.

5.4 Monitoring the deployed Integration Flow status

You can monitor the deployment status under Monitor->Manage Integration Content. The GSP
Integration Flow status must be in “Started”.

Step 6: Testing Incoming Endpoint

The Service endpoint URL for the deployed Integration Flow will be

<Runtime URL>/http/sapdcs/dcs2gsp

You can find the Runtime URL details in the mail received from SAP.

NOTE: the URL will have the keyword ‘iflmap’

You can test these URL endpoints with http client tools like postman

17
SLH: DIGITAL COMPLIANCE SERVICE – GSP INTEGRATION SETUP

NOTE:

a) If you receive 401 Unauthorized error, please make sure that communication user is added to the
tenant and assigned with the role ESBMessaging.send
b) If you receive 404 -Not Found, please make sure the HTTP Endpoint is same as the one provided in
HTTP Sender channel of the deployed Integration Flow.

With this, you have successfully onboarded to SAP Cloud Platform Integration for “SLH: Digital
Compliance Service for India”

References: HCI onboarding guide

APPENDIX: Moving content between tenants (From Dev/Test to PROD)

1) Repeat the steps 1-4 on the PROD tenant

2) Export the Integration Package from Dev/Test Tenant

The modified Integration Flow can be exported by following steps mentioned in the below
screenshot.

18
SLH: DIGITAL COMPLIANCE SERVICE – GSP INTEGRATION SETUP

3) Import the Exported package on to the PROD tenant

Import the Integration Package (zip file that was exported from Test tenant) content by following
the below mentioned steps

4) Execute Steps 5.4(Monitoring the deployed Integration Flow status) and 6 (: Testing Incoming
Endpoint)

19