SAP HANA Developer Guide - Get a Free Blog

12.2 Authentication Overview
Authentication is the process used to validate the identity of the users who connect to SAP HANA.
Secure authentication mechanisms ensure that the users requesting a connection really are who they claim to be.
Note: For connections to SAP HANA it is important to distinguish between SQL- and HTTP-based
connections.
For SQL access to SAP HANA by means of client interfaces, for example, JDBC or ODBC, the following
authentication methods are supported:
● External authentication:
○ Kerberos services
A standardized service for client authentication in networks. The client connects to the Kerberos server to
authenticate the user and to acquire an authentication ticket that proves the user’s identity to the SAP
HANA database. The client uses the ticket to connect to the SAP HANA database. Kerberos also ensures
the correct identity of the server.
○ SAML (bearer token)
SAP HANA can authenticate users who provide a valid standard-based SAML assertion issued by a
trusted identity provider.
● Internal authentication
Users are authenticated by the SAP HANA database using the database user name and password.
SAP HANA maps the external identity approved by external authentication service to the identity of an internal
database user. This internal database user is then used for authorization checks during the database session.
For HTTP access to SAP HANA by means of SAP HANA XS, the following authentication methods are supported:
● User name and password:
○ Using HTTP basic authentication
○ Form-based authentication
● SAP logon tickets
12.3 Roles
Roles contain privileges that are used to define which data, application, or function can be accessed and in which
manner consumed. Roles are assigned either to users or to other roles at runtime.
SAP delivers some generic roles with SAP HANA that can be used as they are or as templates (during design time)
for creating roles that meet your company's specific requirements. More information about roles, their use at
runtime and in design time are explained in the subsequent sections.
● Roles
● Roles as Repository Objects
● Creating Roles in the Repository
SAP HANA Developer Guide
Setting Up Roles and Authorizations
P U B L I C
© 2012 SAP AG. All rights reserved. 321