Conversational Analytics in SAP Joule with SAP Analytics Cloud

Conversational Analytics in SAP Joule: Unlocking Business Insights Through Natural Language Integration with SAP Analytics Cloud

By Ramkumar Arumugasamy

In today’s digital landscape, intuitive insights and intelligent assistance are becoming essential for business users. SAP Joule, the AI-powered digital assistant from SAP, takes this a step further by enabling natural-language queries and actionable insights across enterprise applications. One of the most impactful capabilities of Joule is its ability to connect with SAP Analytics Cloud (SAC) – bringing conversational analytics directly into business workflows.

This blog provides a simplified overview of how SAP Joule is integrated with SAP Analytics Cloud using SAP S/4HANA Public Cloud and SAP Business Technology Platform (BTP).

Prerequisites for Joule Onboarding

Entitlements for Cloud Identity Services – Identity Authentication and Identity Provisioning.To support navigation to different applications from Joule and handle role-based access scenarios, you need to configure the navigation service of SAP Build Work Zone.

Note: By default, SAP Build Work Zone, standard edition uses the SAP Authentication and Trust Management service (XSUAA) for identity authentication. Therefore, we recommend first switching to SAP Cloud Identity Services – Identity Authentication as the authentication mechanism.

Required Applications/Services

Joule à FoundationSAP Build Work Zone, Standard Edition à Foundation or Standard

Here are the steps for configuring Joule:

Configure Destination to Use Navigation Service by creating a Navigation service destinationConfigure Trust to the Identity Authentication Tenant by adding the IAS URL in the joule subaccount trusted configurationConfigure User Attributes for Joule from the Identity DirectoryConfigure Trusted Domains in Identity AuthenticationIntegration Process:

In the current release of Analytical Pattern in Joule, at least one existing Joule setup is required for any line of business (LoB), such as SAP SuccessFactors, SAP S/4HANA Cloud, or SAP Build Work Zone. Joule can also be used in stand-alone mode.

Here, we are using SAP S/4HANA Public Cloud System.

Since most SAP customers already have Joule activated, we address both configuration options below.

Option 1

Create a new SAP BTP Subaccount.Run Joule booster

After completing the Joule Booster process, you will see the Joule formation in Ready status.

This completes the Joule activation for analytical insights. However, additional configuration steps are required.

Option 2

Within your SAP BTP Global Account, navigate to Formations, and search for the Joule formation you have already set up. You can click on Include System.

Review the included system. The system is now ready, which completes the Joule activation for analytical insights.

6. Post-integration checks

Once we follow the steps above, you can validate if the BTP Destination is created in your SAP BTP Subaccount. Destination named – “DYN_SAC_SSO”. Also, verify that the OAuth Client was created in your SAP Analytics Cloud system.

In your SAP Analytics Cloud, you should see a new line item for Joule in the SAC Roles. Ensure that the Read option is selected after the Joule Integration.

7. Create an OAuth Client for the Design Time in SAP Analytics Cloud

Log in to your SAP Analytics Cloud system and create OAuth client under the Configured Clients. 

Using this certificate, create a Trusted Identity Provider named Joule_IDP_Manual in SAC

8. Consume Role Definition Content from SAP Analytics Cloud

Log in to your SAP Analytics Cloud system and create an OAuth Client for Runtime in SAP Analytics Cloud.Create an OAuth Client for Runtime in SAP Analytics CloudNote: Store the Secret value for DT and RT securely, as it will not be visible later.

9. Create a Design Time Destination in your SAP BTP Subaccount

After creating the destination, in additional Properties add the below properties.

HTML5.SetXForwardedHeaders: false &

URL.headers.x-sap-sac-custom-auth: true

10. Create a Runtime Destination by Cloning in our SAP BTP Subaccount

Select the existing DYN_SAC_SSO destination from BTP Joule subaccount and choose Duplicate to create a new destination based of it named (SAC_SWZ_RT)

11. Create a Content Provider in SAP Build Work Zone

To create a content provider in the SAP Build Work Zone, ensure you have the “Launchpad_Admin” role assigned.

12. Provision Users from SAP Analytics Cloud to SAP Build Work Zone Using IPS

Note: This process provisions users from SAP Analytics Cloud to SAP Build Work Zone. You will be working in SAP Cloud Identity Services and will need Administrator access.

Setup SAP SAC as a Source System in IASSetup SAP Build Work Zone as a Target System in IAS

13. Run User and Group Provisioning Job in IAS

              Check provisioning Logs to see the status.

14. Validate Provisioning

Open Build work zone application from BTPGo to Channel Manager and refresh it to validate the provisioning.

15. Index Your Data Using Just Ask and Test Your Integration

The data available for your business users to ask Joule analytical questions is the data from supported models indexed by the just ask feature in your SAP Analytics Cloud tenant. Analytical insights support the following indexed models:

Models acquired from external sources and imported into SAP Analytics Cloud.Analytic models from SAP Datasphere that are part of an SAP Business Data Cloud formation that also includes your SAP Analytics Cloud system.

Your users will need different permissions in SAP Analytics Cloud depending on their role:

To index models in the just ask feature of SAP Analytics Cloud, users will need the Maintain permission for the Just Ask privilege.To ask questions to Joule’s analytical insights feature and view answers and charts, users need the Read permission for the Joule privilege.

16. Open your S/4HANA Public Cloud instance and launch Joule

Query: – Give me a chart of discount per product Coca-Cola and per store

​ Conversational Analytics in SAP Joule: Unlocking Business Insights Through Natural Language Integration with SAP Analytics CloudBy Ramkumar ArumugasamyIn today’s digital landscape, intuitive insights and intelligent assistance are becoming essential for business users. SAP Joule, the AI-powered digital assistant from SAP, takes this a step further by enabling natural-language queries and actionable insights across enterprise applications. One of the most impactful capabilities of Joule is its ability to connect with SAP Analytics Cloud (SAC) – bringing conversational analytics directly into business workflows.This blog provides a simplified overview of how SAP Joule is integrated with SAP Analytics Cloud using SAP S/4HANA Public Cloud and SAP Business Technology Platform (BTP).Prerequisites for Joule OnboardingEntitlements for Cloud Identity Services – Identity Authentication and Identity Provisioning.To support navigation to different applications from Joule and handle role-based access scenarios, you need to configure the navigation service of SAP Build Work Zone.Note: By default, SAP Build Work Zone, standard edition uses the SAP Authentication and Trust Management service (XSUAA) for identity authentication. Therefore, we recommend first switching to SAP Cloud Identity Services – Identity Authentication as the authentication mechanism.Required Applications/ServicesJoule à FoundationSAP Build Work Zone, Standard Edition à Foundation or StandardHere are the steps for configuring Joule:Configure Destination to Use Navigation Service by creating a Navigation service destinationConfigure Trust to the Identity Authentication Tenant by adding the IAS URL in the joule subaccount trusted configurationConfigure User Attributes for Joule from the Identity DirectoryConfigure Trusted Domains in Identity AuthenticationIntegration Process:In the current release of Analytical Pattern in Joule, at least one existing Joule setup is required for any line of business (LoB), such as SAP SuccessFactors, SAP S/4HANA Cloud, or SAP Build Work Zone. Joule can also be used in stand-alone mode.Here, we are using SAP S/4HANA Public Cloud System.Since most SAP customers already have Joule activated, we address both configuration options below.Option 1Create a new SAP BTP Subaccount.Run Joule booster After completing the Joule Booster process, you will see the Joule formation in Ready status. This completes the Joule activation for analytical insights. However, additional configuration steps are required.Option 2Within your SAP BTP Global Account, navigate to Formations, and search for the Joule formation you have already set up. You can click on Include System.  Review the included system. The system is now ready, which completes the Joule activation for analytical insights.6. Post-integration checksOnce we follow the steps above, you can validate if the BTP Destination is created in your SAP BTP Subaccount. Destination named – “DYN_SAC_SSO”. Also, verify that the OAuth Client was created in your SAP Analytics Cloud system. In your SAP Analytics Cloud, you should see a new line item for Joule in the SAC Roles. Ensure that the Read option is selected after the Joule Integration.7. Create an OAuth Client for the Design Time in SAP Analytics CloudLog in to your SAP Analytics Cloud system and create OAuth client under the Configured Clients.   Using this certificate, create a Trusted Identity Provider named Joule_IDP_Manual in SAC8. Consume Role Definition Content from SAP Analytics CloudLog in to your SAP Analytics Cloud system and create an OAuth Client for Runtime in SAP Analytics Cloud.Create an OAuth Client for Runtime in SAP Analytics CloudNote: Store the Secret value for DT and RT securely, as it will not be visible later.9. Create a Design Time Destination in your SAP BTP SubaccountAfter creating the destination, in additional Properties add the below properties.HTML5.SetXForwardedHeaders: false &URL.headers.x-sap-sac-custom-auth: true10. Create a Runtime Destination by Cloning in our SAP BTP SubaccountSelect the existing DYN_SAC_SSO destination from BTP Joule subaccount and choose Duplicate to create a new destination based of it named (SAC_SWZ_RT)11. Create a Content Provider in SAP Build Work ZoneTo create a content provider in the SAP Build Work Zone, ensure you have the “Launchpad_Admin” role assigned. 12. Provision Users from SAP Analytics Cloud to SAP Build Work Zone Using IPSNote: This process provisions users from SAP Analytics Cloud to SAP Build Work Zone. You will be working in SAP Cloud Identity Services and will need Administrator access. Setup SAP SAC as a Source System in IASSetup SAP Build Work Zone as a Target System in IAS  13. Run User and Group Provisioning Job in IAS              Check provisioning Logs to see the status.14. Validate ProvisioningOpen Build work zone application from BTPGo to Channel Manager and refresh it to validate the provisioning.15. Index Your Data Using Just Ask and Test Your IntegrationThe data available for your business users to ask Joule analytical questions is the data from supported models indexed by the just ask feature in your SAP Analytics Cloud tenant. Analytical insights support the following indexed models:Models acquired from external sources and imported into SAP Analytics Cloud.Analytic models from SAP Datasphere that are part of an SAP Business Data Cloud formation that also includes your SAP Analytics Cloud system.Your users will need different permissions in SAP Analytics Cloud depending on their role:To index models in the just ask feature of SAP Analytics Cloud, users will need the Maintain permission for the Just Ask privilege.To ask questions to Joule’s analytical insights feature and view answers and charts, users need the Read permission for the Joule privilege.16. Open your S/4HANA Public Cloud instance and launch Joule Query: – Give me a chart of discount per product Coca-Cola and per storeConclusion: -The integration of SAP Joule with SAP Analytics Cloud (SAC) represents a significant advancement in making business intelligence more accessible through natural language interactions. By leveraging SAP Business Technology Platform, SAP Build Work Zone, SAP Cloud Identity Services, and SAP S/4HANA Public Cloud, organizations can enable conversational analytics that empowers users to explore data, generate insights, and visualize results without requiring deep technical expertise.Successful implementation requires careful configuration of authentication, trust relationships, destinations, OAuth clients, content providers, and user provisioning. Once integrated, Joule can seamlessly access indexed SAC models through the Just Ask capability, allowing users to retrieve analytical insights, charts, and business information through simple conversational queries.This integration enhances user productivity, accelerates decision-making, and promotes self-service analytics by bringing AI-driven insights directly into daily business workflows. As organizations continue their digital transformation journey, SAP Joule and SAP Analytics Cloud together provide a powerful foundation for intelligent, data-driven enterprise operations.   Read More Technology Blog Posts by Members articles 

#SAP

#SAPTechnologyblog