LDAP (AD) integration with Hana Cloud for Automatic User provisioning

[Anwar03]

Hi All

However, I'm trying to configure LDAP (AD) which is at on Premise and and connecting Hana Cloud to AD via Cloud Connector.

The connections works to AD LDAP host via cloud connector but how do I make it work in the SQL query.

The LDAP provider is created successfully but the next step to validate is not working. Even I have imported all the Root Certs of AD properly in the Hana Cloud. The issue I'm facing while validating the LDAP connection. IT gives the below binding error.

Could not execute 'VALIDATE LDAP PROVIDER TEST_LDAP'
Error: (dberror) [4200]: Validate LDAP provider failed because of internal error: Unable to bind with LDAP provider TEST_LDAP: Connection failed

Is this configuration only available using a public LDAP server or a configuration using SAP Cloud Connector is also possible to integrate with an on-prem LDAP?

In such scenario, how the LDAP URL has to be set in the CREATE/ALTER LDAP provider statement? I don't see any details on how to specify that the URL has to point to the SAP Cloud Connector.

CREATE LDAP PROVIDER test_ldap

CREDENTIAL TYPE 'PASSWORD'

USING 'user=CN=admin,CN-Users,OU=Employees,DC=corp,DC=com;password=******'

USER LOOKUP URL 'ldaps://virtualhost:443/CN=Users,OU=Employees,DC=corp,DC=com??sub?(&(objectClass=user)(sAMAccountName=*))'

ATTRIBUTE DN 'distinguishedName'

ATTRIBUTE MEMBER_OF 'memberOf'

DEFAULT ON;

ALTER LDAP PROVIDER test_ldap

ENABLE PROVIDER;

Appreciate your response.

Regards

[AlexPJ]

Hello Ali,

to my best knowledge it is not possible to connect an LDAP provider via Cloud Connector to SAP HANA Cloud. The LDAP service has to be exposed to the Internet (e.g. via Azure) for this.
Connecting HANA Cloud instances to an LDAP via Cloud Connector is a feature we have been awaiting for quite some time, unfortunately it is not even on the roadmap yet.
Best regards,
Alexander