Create an SAP Datasphere connection to an Edge site

Before you can synchronize SAP Datasphere Catalog, you need to prepare your Edge site. To use the unified SAP Datasphere Catalog integration, you need:

  • Collibra Platform Self-Hosted 2025.02 or newer.
  • Edge 2025.02.7 or newer.

If you have defined an outbound (forward) proxy on your Edge site, the integration considers that configuration when connecting to the data source.

Note that Edge doesn't allow more than one capability of the same type for a connection. If you have more than one SAP Datasphere tenant, duplicate your SAP Datasphere Catalog connection and create a capability for each SAP Datasphere tenant.

Do you use a vault?

You can use a vault to add your data source information to your Edge site connection.

Check the connection property table below to see which information is available for your vault.

Vaults are not available for Collibra Cloud site sites.
No vault
AWS Secrets Manager
Azure Key Vault
CyberArk Vault
Google Secret Manager
HashiCorp Vault
  
To use your vault, do the following:
  1. In the Value Type field, select Vault Key.
  2. Enter the query value to identify the secret in your vault.
    Example 
    Note The Query must be a string containing the properties required to identify the secret. Each property must be separated by a semicolon (;). For example: Safe=<SafeName>;Folder=<FolderName>;Object=<ObjectName>

    If a property is a folder with sub-folders, use a backslash (\) to define the folder path. For example: Folder=Root\Top Secrets\More Secrets

    For more information about query formats and supported properties, go to the CyberArk Credential Provider documentation.

To use your vault, do the following:
  1. In the Value Type field, select Vault Key.
  2. Enter the required information:
    Secret Engine Type
    Select one of the following:
    • Key Value
    • Database
    Engine Path
    The engine path to your vault where the value is stored.
    Secret Path
    The secret path to your vault where the value is stored.
    Field
    If your Secret Engine Type is Key Value, enter the name of the field to your vault where the value is stored.
    Role
    If your Secret Engine Type is Database, enter the role specified in the Database engine.
    Example 

To use your vault, do the following:
  1. In the Value Type field, select Vault Key.
  2. Enter the required information:
    Vault Name
    The name of your Azure Key Vault in your Azure Key Vault service where the value is stored.
    Secret Name
    The name of the secret in your vault where the value is stored.
    Example 

To use your vault, do the following:
  1. In the Value Type field, select Vault Key.
  2. Enter the required information:
    Secret Name
    The name of the secret in your vault where the value is stored.
    Field
    If the secret stored in your AWS Secrets Manager is a JSON value, for example {"pass1": "my-password", "pass2": "my-password2"}, then you need to specify the Field to point to the exact JSON value that should be used. For example, Secret Name: edge-db-customer; Field: pass.
    Note If the secret stored in your AWS Secrets Manager is a plain string value, for example my-password, then you do not need to specify the Field.
    Example 

To use your vault, do the following:
  1. In the Value Type field, select Vault Key.
  2. Enter the name of the secret in your vault where the value is stored.
    Example 

Prerequisites

In your Collibra environment

In your SAP environment

  • You are a System Owner in SAP Analytics Cloud.
  • You have set up your SAP Datasphere Catalog token.

Steps

  1. Open a site.
    1. On the main toolbar, click Products icon → Cogwheel icon Settings.
      The Settings page opens.
    2. In the tab pane, click Edge.
      The Sites tab opens and shows a table with an overview of your sites.
    3. In the site overview, click the name of a site.
      The site page appears.
  2. In the Connections section, click Create Connection.
    The Create Connection dialog box appears.
  3. Select SAP Datasphere Catalog connection.
  4. Enter the required information.
    FieldDescriptionRequiredAvailable for vaults?
    Name

    The name of the connection. The name can be anything, as long as it is unique.

    Tip The name that you provide here is the name you have to select in the SAP Datasphere Catalog connection field, when adding the SAP Datasphere Catalog synchronization capability or Technical Lineage for SAP Analytics Cloud capability to the Edge site.

    		 Yes No
    DescriptionThe description of the connection. No No
    Vault The vault where you store your data source values. No No
    SAP Datasphere Catalog URL

    The URL to the SAP Datasphere tenant where you have configured SAP Datasphere Catalog.

    		 Yes Yes
    Token URL

    The token URL of your OAuth client.

    1. In SAP, toward the bottom of the SAP Datasphere homepage, click System and then click Administration.
    2. In the tab pane, click App Integration.
    3. In the OAuth Clients section, under Token URL, you'll find the token URL.
    		 Yes No
    Client ID

    The Client ID of your OAuth client.

    1. In SAP, toward the bottom of the SAP Datasphere homepage, click System and then click Administration.
    2. In the tab pane, click App Integration.
    3. In the OAuth Clients section, scroll down to Configured Clients. Client IDs start with sb.
    		 Yes Yes
    Client secret key

    The secret of your OAuth client. The secret key is used to generate a token to access the SAP Datasphere Catalog API.

    		 Yes Yes
  5. Click Create.

What's next

You can now add the SAP Datasphere Catalog synchronization capability to an Edge site.