This page describes the credentials you need to enter on the Connection credentials screen to create an SAP connection. The credentials required depend on the authentication type you select.
There are two types of authentication method: Basic and OAuth.
Authenticate with basic authentication
If your SAP instance uses basic authentication, select Basic as the Auth Type option, and complete these fields.
| Connection credentials fields | Description |
| Auth type | Select Basic. |
| Base URL | The base endpoint URL of the target SAP OData service. |
| SAP client (optional) | The SAP client identifier used to access the target SAP system. |
| User name | The user name of the SAP user account or service user |
| Password | The password associated with the SAP user account. |
Authenticate with OAuth
If your SAP instance uses an OAuth client, select OAuth as the Auth Type option, and complete these fields.
Note: Data Orchestrator doesn't sign you in through a browser. You must obtain a refresh token from your SAP authorization server or identity provider (IdP). Then enter the client ID, client secret, refresh token endpoint, and refresh token. If the OAuth client is configured with scopes, enter the same values in scopes. A connection test can fail with a valid client ID and secret if the refresh token or scopes are missing or incorrect.
| Connection credentials fields | Description |
| Auth type | Select OAuth. |
| Base URL | The base endpoint URL of the target SAP OData service. |
| SAP client (optional) | The SAP client identifier used to access the target SAP system. |
| Client ID | The OAuth 2.0 client identifier registered in SAP. |
| Client secret | The secret associated with the registered OAuth 2.0 client. |
| Refresh token | The refresh token used to obtain new access tokens from the SAP authorization server. |
| Scopes (optional) | The OAuth 2.0 scopes defining the client’s access permissions to the SAP OData service. |
