Internet facing SAP Fiori with Azure Application Gateway and Azure AD SSO configuration

Introduction

In episode 80 of our SAP on Azure video podcast we talk about a new SAP and Microsoft landing page, a SAP and Microsoft blog post gallery by Martin Pankraz, part 5 of Martin Raepples principal propagation blog post looking into Azure API Management, Power Virtual Agent and SAP, look at Kerberos authentication with Azure NetApp Files, a reminder on how to setup SSO with Azure Active Directory Domain services and SAP GUI and part 4 and 5 of Martin Fricks SAP & Teams integration series. Then we go deep with Dennis Padia who talks about internet facing SAP Fiori apps with Azure Application Gateway and Azure AD SSO configuration.

• How to get started with SAP and Microsoft
• How to get started with SAP and Microsoft integration scenarios
• Integration Ninja Cats
• Principal propagation in a multi-cloud solution between Microsoft Azure and SAP Business Technology Platform (BTP), Part V: Production readiness with unified API- and infrastructure management
• Implementing Azure NetApp Files with Kerberos
• Your SAP on Azure – Part 8 – Single Sign-On using Azure AD Domain Services
• [SAP & MS Teams] 4 – SAP BTP subaccount configuration and test users
• [SAP & MS Teams] 5 – SAP SuccessFactors instance setup
• SAP on Azure: Load Balancing Web Application Servers for SAP BOBI using Azure Application Gateway
• SAP on Azure: Single Sign On Configuration using SAML and Azure Active Directory for Public and Internal URLs
• SAP on Azure: Azure Application Gateway Web Application Firewall (WAF) v2 Setup for Internet facing SAP Fiori Apps
• Considerations and Recommendations for Internet-facing Fiori apps

• 0:00 Intro
• 0:55 How to get started with SAP and Microsoft
• 2:33 Integration Ninja Cats
• 3:45 Principal propagation in a multi-cloud solution between Microsoft Azure and SAP Business Technology Platform (BTP), Part V Production readiness with unified API- and infrastructure management
• 5:40 Implementing Azure NetApp Files with Kerberos
• 8:34 Your SAP on Azure – Part 8 – Single Sign-On using Azure AD Domain Services
• 9:30 SAP & MS Teams
• 10:37 Introducing Dennis Padia
• 11:22 SAP Fiori Deployment Options
• 14:05 SAP Fiori Deployment Recommendation
• 17:29 Internet Facing SAP Fiori Architecture on Azure
• 26:05 Insight about exposing SAP Fiori apps to the Internet in Azure 1/2
• 27:04 When Application Gateway, why SAP Web Dispatcher?
• 29:32 Insight about exposing SAP Fiori apps to the Internet in Azure 2/2
• 34:48 Application Gateway and its configuration options
• 37:32 v1 SKU vs v2 SKU
• 40:56 Web Application Firewall on Application Gateway
• 42:50 Pre-requisites
• 45:15 Application Gateway WAF v2 Setup for SAP Fiori
• 48:24 Demo
• 55:20 Demo Test configuration
• 56:42 Testing Proxy Configuration
• 58:29 Preserve Host Header
• 1:00:35 validating Demo accessing SAP Fiori
• 1:01:40 SAML SSO with Azure AD Architecture for SAP Fiori
• 1:02:20 SAML SSO with Azure AD Configuration
• 1:10:00 Maintaining multiple URLs
• 1:12:34 Troubleshooting WAF Modes
• 1:15:58 References