Espresso Tutorials

Securing SAP Fiori

SAP Fiori Help
 

This article is an excerpt from Securing SAP S/4HANA, courtesy of Espresso Tutorials.

Securing Fiori

SAP Fiori is a new user experience (UX) for SAP software and applications. It provides a set of applications that are used in regular business functions such as work approvals, financial apps, calculation apps, and various self-service apps. The SAP user interface, or SAP GUI as we know it today, was first introduced in 1992 together with the official release of SAP R/3. SAP R/3, the client server edition, was the successor to the SAP R/2 release, the mainframe edition. Although SAP has made several attempts to modernize SAP GUI, an end user from the time it was introduced would still find their way around today. Many transactions and screens have remained the same or changed very little. Since the initial release of SAP GUI, SAP has released several alternative user interfaces such as the SAP Workplace (which was part of the mySAP.com offering), the SAP Enterprise Portal, and the NetWeaver Business Client or NWBC. None were as successful as SAP GUI except, perhaps, for the NetWeaver Business Client. The NetWeaver Business Client is, however, an extension to the SAP GUI. The conclusion of all this is that although many people complained about the old-fashioned look of SAP GUI, they kept using it and will probably continue to do so in the future. But there is no denying the fact that the user community is changing fast. The SAP users of tomorrow are the youngsters of today, who are used to accessing data from their mobile devices. To them, SAP GUI is a relic from the dark ages. This shift is not limited to youngsters—many end users want data access from any device, from any place, at any time. SAP released SAP Fiori to respond to this demand. SAP Fiori is built using modern design principles you might expect from applications designed for smartphones and tablets. There are already more than 500 role-based Fiori applications such as for HR, Finance, and Business Intelligence. An SAP Fiori application is always limited to a specific task or activity. The design is responsive and deployable on multiple platforms. There are three types of SAP Fiori applications: transactional apps, fact sheets, and analytical apps. SECURING FIORI 46

Transactional or task-based applications

The transactional SAP Fiori applications are limited to specific tasks such as entering a holiday request or expense note. They give end users fast access to data and represent a simplified view of an existing business process or workflow.

Fact sheets

Fact sheets have far more capabilities than transactional applications. From a fact sheet, you can drill down into the details. You can even navigate from one fact sheet to another or jump to the related transactional applications. For fact sheets, the underlying database must be SAP HANA. An example of a fact sheet is an application that shows the overview and details of a piece of equipment and its maintenance schedule.

Analytical applications

Analytical applications build on business intelligence using the capabilities of SAP HANA. They allow you to monitor key performance indicators (KPIs) of your business operations and to react immediately as changes occur. An example is the sales orders application, which immediately shows your sales representative the sales history from his customer, allowing him to take discount decisions immediately.

Deployment options

SAP Fiori apps consist of front-end components, which provide the user interface and the connection to the back end, and back-end components, which provide the data. The front-end components and the back-end components are delivered in separate products and must be installed in a system landscape that is enabled for SAP Fiori. There are multiple deployment options for the SAP Fiori components, each with their respective advantages and disadvantages. SAP Fiori applications are accessed through the SAP NetWeaver Gateway. The gateway consists of two components: SAP Gateway Foundation (SAP_GWFND) and User Interface Technology (SAP_UI). Both components are add-ons, which from NetWeaver version 7.4, are part of the SAP NetWeaver ABAP Stack. With NetWeaver 7.31, the components had to be deployed separately. This means that any system built on SAP NetWeaver, such as SAP ERP or SAP CRM, can be used to deploy SAP Fiori applications. SECURING FIORI 47 The following deployment options exist: central hub deployment, the embedded scenario and the cloud edition (see Figure 2.1). Figure 2.1: SAP Fiori deployment options

Figure 2.1: SAP Fiori deployment options

Figure 2.1: SAP Fiori deployment options

Central hub deployment

The central hub deployment is the preferred option. Here, SAP NetWeaver Gateway is installed as a separate system. The Fiori applications are deployed here and access the data on the back-end business systems, such as SAP ERP or SAP CRM. Although this option implies an extra system, thus a higher total cost of ownership (TCO), it enables a multi-back-end system scenario while ensuring a consistent look and feel for the different applications. The central hub can be considered a single point of access for all mobile applications. In addition, installing SAP NetWeaver Gateway on a separate system allows you to move the system behind or in front of the firewall depending on your current network topology and security requirements. SECURING FIORI 48

Embedded scenario

SAP NetWeaver is the basis of all ABAP-based SAP applications, regardless of whether you are talking about SAP ERP, SAP BW, or any of the others. As the gateway is an add-on for SAP NetWeaver, it is available on every ABAP-based business application. This means that it can be activated and that Fiori applications can be deployed on any system. This makes an extra system unnecessary. However, we do not recommend the embedded scenario as, in contrast to the central hub deployment, it results in Fiori applications being installed all over the place— negating the advantage of the single point of access for all mobile applications. The embedded scenario should only be considered during a proof of concept or when the deployment of mobile applications is going to be limited to a single SAP application such as SAP ERP. 2.1.3

Cloud edition

The SAP Fiori cloud edition is a ready-to-use infrastructure which can serve as a front end while leaving the back-end systems on premise. The connection to the SAP Fiori Cloud is realized via SAP Cloud Connector, which must be installed on premise. The back-end components still have to be installed on the back-end systems.

Comparison of the deployment options

Table 2.1 compares the different deployment options. Every deployment option has its respective advantages and disadvantages. The importance of the pros and cons differ in every customer situation. We strongly recommend the central hub deployment option as it enables a single point of access to your mobile applications for SAP ERP, SAP BW, and many others, while at the same time ensuring the same look and feel. Due to its limitations and dependencies, the embedded scenario should only be considered in a proof-of-concept scenario.

Table 2.1: Comparison of the deployment options

Table 2.1: Comparison of the deployment options

SAP S/4HANA Finance – Hierarchies

With their latest product, SAP S/4HANA, SAP is revolutionizing how we approach finance by re-architecting data persistency and merging accounts and cost elements. This book offers a fundamental introduction to SAP S/4HANA Finance. Dive into the three pillars of innovation including SAP Accounting powered by SAP HANA, SAP Cash Management, and SAP BI Integrated Planning. Find out about the new configuration options, updated data model, and what this means for reporting in the future. Get a first-hand look at the new user interfaces in SAP Fiori. Review new universal journal, asset accounting, material ledger, and account-based profitability analysis functionality. Examine the steps required to migrate to SAP S/4HANA Finance and walk through the deployment options. By using practical examples, tips, and screenshots, this book helps readers to:

- Understand the basics of SAP S/4HANA Finance
- Explore the new architecture, configuration options, and SAP Fiori
- Examine SAP S/4HANA Finance migration steps
- Assess the impact on business processes

First Steps in SAP Fiori

Excerpt from    First Steps in SAP®    Fiori    by: Anurag Barua

Excerpt from First Steps in SAP® Fiori

by: Anurag Barua

 

Chapter 4 SAP Fiori: An Overview

A question that many of my customers ask is, “What is SAP Fiori all about?” It’s a question that has a significantly long answer because SAP Fiori is not just one thing but rather a convergence of many things. Quite simply, it is SAP’s truly new user experience, or for those of you with a technical mindset, it is SAP’s new user interface. SAP Fiori marks the end of the era of the traditional gray screens of the flagship SAP GUI, which has existed for over two decades. SAP GUI has been a constant scourge for SAP users worldwide because of the over-abundance of fields and tabs that users have to either enter data in or click through and because of its distinct lack of visual appeal. For those of you interested in statistics, there are over 300,000 individual SAP screens that form the conduit for transactional processing. This is not a trivial number and what bewilders SAP users even today, is that a lot of these screens contain fields that are rarely used and every basic transaction has multiple screens that a user may have to scroll through.

SAP Fiori provides users with a standardized (tile-based) look and feel that is intuitive, visual, and offers fields that are displayed based on the user’s roles and authorizations.

At the heart of SAP Fiori is the increasing number of out-of- the-box apps (applications) that SAP provides which correspond to the whole gamut of standard business processes such as order entry (purchase or sales), leave request approval, etc. Currently, there are almost 500 apps available free of charge and if the investment into SAP Fiori is any indication, this number will continue to increase. If the SAP infrastructure prerequisites are met (I will discuss these later), you should be able to be up and running with any such app in a matter of a few hours. When I started my own SAP Fiori odyssey a couple of years ago, it took me approximately six hours to get a standard cost center app up and running. Disclaimer: All configuration on the infrastructure side had already been performed by the Basis/NetWeaver administrator and I was able to draw heavily on my years of SAP experience.

SAP Fiori represents a shift from transaction code-based interaction to interaction that is driven by business processes and the users’ roles and responsibilities in an organization and as maintained in the SAP security framework. The interaction is heavily influenced by the seismic shift that has taken place in the consumer marketplace, where business is increasingly transacted on mobile devices via simple apps. SAP Fiori leverages this concept to provide the same end user experience that eschews exposing the complexity of the solution and provides users with an engaging experience. It is based on the theory of “build once, run everywhere”. Therefore, with SAP Fiori, your app will run on your desktop as well as your mobile device and will look and feel exactly the same on both: you do not have to create a separate desktop version of your app and a separate one for your mobile device.

As the years have gone by, SAP’s advertising campaigns bear testimony to how the focus has shifted from highlighting its all-encompassing and integrated nature to a simplified, user-driven software suite. The journey from The Best Run Businesses Run SAP to Run Simple has seen SAP go through many ups and downs and

detours, has seen SAP go through many ups and downs and detours, including multiple acquisitions and strategy changes, as it has evolved from an introverted German software maker to a global innovation factory that provides speedy solutions with a high business ROI. And one of the primary lessons that SAP has learned well is that no matter how wonderfully efficient the software engineering is, it is ultimately the user experience that counts.

SAP Fiori apps have been designed using certain platform-agnostic design tools such as HTML5, JavaScript, and CSS. This combination of tools has been wrapped into something called SAP UI5 but I will come back to this a little later. As a result, SAP Fiori apps can be rendered on all kinds of mobile devices without the need for any software magic such as creating wrappers to ensure compatibility. Furthermore, this framework also provides users with a convenient means to enhance existing apps and incorporate users’ business needs.

SAP Fiori and NetWeaver security: A question that is often asked is whether SAP Fiori leverages the SAP NetWeaver security framework or whether you have to design security separately for SAP Fiori. The good news is that SAP Fiori allows you to leverage your existing NetWeaver security model. In fact, when you configure any app, the visibility and access are determined by the roles and authorizations that particular user is assigned to.


Keep reading in First Steps in SAP Fiori by Anurag Barua [https://espresso-tutorials.com/Programming_0126.php].

Are you wondering what SAP Fiori is all about? Dive into SAP’s new user interface and gain an understanding of core SAP Fiori concepts and get quickly up to speed SAP Fiori functionality, architecture, prerequisites, and technical components. Walk through key configuration and get examples of what has gone well (and not so well) on real SAP Fiori implementation projects. Take a technical deep dive into the types of Fiori apps including transactional apps, analytics apps, and fact sheets and walk through custom development and enhancements. By using practical examples, tips, and screenshots, the author brings technical and non-technical readers alike up to speed on SAP Fiori.

  • SAP Fiori fundamentals and core components

  • Instructions on how to create and enhance an SAP Fiori app

  • Installation and configuration best practices

  • Similarities and differences between SAP Fiori and Screen Personas

Migrating to SAP S/4HANA Finance: Documenting a Migration Part 2

With their latest product, SAP S/4HANA, SAP is revolutionizing how we approach finance by re-architecting data persistency and merging accounts and cost elements. This book offers a fundamental introduction to SAP S/4HANA Finance. Dive into the three pillars of innovation including SAP Accounting powered by SAP HANA, SAP Cash Management, and SAP BI Integrated Planning. Find out about the new configuration options, updated data model, and what this means for reporting in the future. Get a first-hand look at the new user interfaces in SAP Fiori. Review new universal journal, asset accounting, material ledger, and account-based profitability analysis functionality. Examine the steps required to migrate to SAP S/4HANA Finance and walk through the deployment options. By using practical examples, tips, and screenshots, this book helps readers to:

- Understand the basics of SAP S/4HANA Finance
- Explore the new architecture, configuration options, and SAP Fiori
- Examine SAP S/4HANA Finance migration steps
- Assess the impact on business processes

Migrating to SAP S/4HANA Finance: Documenting a Migration Part 1

With their latest product, SAP S/4HANA, SAP is revolutionizing how we approach finance by re-architecting data persistency and merging accounts and cost elements. This book offers a fundamental introduction to SAP S/4HANA Finance. Dive into the three pillars of innovation including SAP Accounting powered by SAP HANA, SAP Cash Management, and SAP BI Integrated Planning. Find out about the new configuration options, updated data model, and what this means for reporting in the future. Get a first-hand look at the new user interfaces in SAP Fiori. Review new universal journal, asset accounting, material ledger, and account-based profitability analysis functionality. Examine the steps required to migrate to SAP S/4HANA Finance and walk through the deployment options. By using practical examples, tips, and screenshots, this book helps readers to:

- Understand the basics of SAP S/4HANA Finance
- Explore the new architecture, configuration options, and SAP Fiori
- Examine SAP S/4HANA Finance migration steps
- Assess the impact on business processes