/
(Glue-2502) Azure Data Lake Gen2 Prerequisites

(Glue-2502) Azure Data Lake Gen2 Prerequisites

Owned by SNP (Deactivated)
Last updated: Feb 25, 2025 by Marian Vidra

High-level summary of necessary steps (more details in MS Azure documentation):

SAP Basis/Infrastructure tasks:

SAP Basis team:

  1. Java Connector: https://datavard.atlassian.net/wiki/spaces/DATAVARD/pages/2229602754

    1. Creation of SNP_JAVA_CONN RFC:

      1. Connection type: TCP/IP Connection.

      2. Activation type: Registered Server Program.

      3. Fill in the Program ID (e.g.): SNP_JAVA_CONNECTOR.

    2. Creation of Technical SAP user for ABAP->JCO RFC Communication:

      1. In transport, you are provided with a template role with name /DVD/JCORFC (if you will use this role, do not forget to generate the profile in transaction PFCG).

      2. Create System user, with role /DVD/JCORFC.

    3. Granting access for external program SNP_JAVA_CONN to SAP gateway:

      1. Check SMGW > GoTo > Expert Functions > External Security > Maintenance of ACL files whether external programs are allowed (=* or ProgramID).

  2. SAP system: https://datavard.atlassian.net/wiki/spaces/DATAVARD/pages/4510354505#id-(SM-2402)AzureDataLakeGen2-SAPsystemconfiguration

    1. Uploading certificates to STRUST for secure SSL connection between SAP and Microsoft services (into SSL client Anonymous PSE).

    2. Creation of storage RFC and configuration of the RFC are dependent on the type of Authentication chosen (more details can be found in https://datavard.atlassian.net/wiki/spaces/DATAVARD/pages/4510354505#id-(SM-2402)AzureDataLakeGen2-StorageRFC).

Networking team:

  1. Enabling outbound communication from the SAP system to ADLS Gen 2

Port

Address

Port

Address

443

<NameOfStorageAccount>.dfs.core.windows.net

Azure team:

  1. Azure storage: https://datavard.atlassian.net/wiki/spaces/DATAVARD/pages/2229600587

    1. Storage account is needed (more details in https://datavard.atlassian.net/wiki/spaces/DATAVARD/pages/4510354505#id-(SM-2402)AzureDataLakeGen2-Azurestorageconfiguration).

    2. Preparation of Landing area (container/directory).

    3. Authentication to ADLS, there are two possible options possible - SAS token or OAuth 2.0 (more details can be found in https://datavard.atlassian.net/wiki/spaces/DATAVARD/pages/4510354505#id-(SM-2402)AzureDataLakeGen2-Authentication).

 

Related content