Step-by-step deployment guide

The SAP Cloud Foundry connector imports users, organizations, organization roles, spaces, and space roles into Elimity Insights, giving you full visibility into who has access within Cloud Foundry.

1. Which data is imported from SAP Cloud Foundry?

The following entity types are imported:

• Users: all users registered in Cloud Foundry

• Organizations: Cloud Foundry organizations (orgs)

• Spaces: spaces within each organization

• Organization Roles: role assignments scoped to an organization (e.g. organization_manager, organization_user)

• Space Roles: role assignments scoped to a space (e.g. space_developer, space_auditor)

The diagram below shows the relationships between these entity types:

User attributes

Attribute	Description
Guid	Cloud Foundry user GUID
Username	Username
Presentation Name	Display name
Origin	Identity provider origin (e.g. ldap, sap.ids)
Zone	Cloud Foundry region (e.g. EU10)

Organization attributes

Attribute	Description
Guid	Cloud Foundry organization GUID
Name	Organization name
Suspended	Whether the organization is suspended
Zone	Cloud Foundry region

Space attributes

Attribute	Description
Guid	Cloud Foundry space GUID
Name	Space name
Organization Guid	GUID of the parent organization
Zone	Cloud Foundry region

Organization Role attributes

Attribute	Description
Role Type	Role type (e.g. organization_manager, organization_user, organization_auditor, organization_billing_manager)

Space Role attributes

Attribute	Description
Role Type	Role type (e.g. space_developer, space_manager, space_auditor, space_supporter)

The connector supports multiple Cloud Foundry regions in a single import. Each region is represented as a separate zone value on the entities. Each Cloud Foundry Organization has a 1:1 relationship with a SAP BTP Subaccount.

2. Preparing credentials from SAP BTP Cloud Foundry

The connector authenticates against each Cloud Foundry region using a username, a password and a client id. These credentials are configure per region/zone.

This is the configuration value you need to create in order to import data into Elimtiy. It's a JSON array consisting of regional Cloud Foundry authentication credentials:

[
  {
    "cf_region": "EU10",
    "cf_username": "[e-mail]",
    "cf_password": "your-password",
    "cf_clientId": "cloud_foundry",
    "cf_tokenUrl": "https://login.cf.eu10.hana.ondemand.com/oauth/token",
    "cf_apiUrl": "https://api.cf.eu10.hana.ondemand.com"
  },
  {
    "cf_region": "US10",
    "cf_username": "[e-mail]",
    "cf_password": "your-password",
    "cf_clientId": "cloud_foundry",
    "cf_tokenUrl": "https://login.cf.us10.hana.ondemand.com/oauth/token",
    "cf_apiUrl": "https://api.cf.us10.hana.ondemand.com"
  }
]

3. Configure the source in Elimity Insights

1. Go to Sources in the left navigation bar and click Add Source.

2. Search for Custom and click Set Up.

3. Click Set Up again and give the source a name (e.g. SAP Cloud Foundry).

4. Select Upload export file, click Continue and upload the data model file: sap-cf-data-model.json.

sap-cf-data-model.json

3KB

Open

1. Open the Config tab and click Edit.

2. Set Enable automatic imports via custom gateway to true and fill in the Gateway URL: https://sap-cf-gateway-1027270379075.europe-west1.run.app.

3. Click Add configuration value and add the entry below.

Key	Type	Where to find it
credentials	Secret File	The JSON value from step 2 in a .json file

Click Save and run to launch your first import. Monitor progress in the Logs tab; the Imports tab shows the summary for each run.