Set up Anaplan
Atlan uses Basic or CA Certificate authentication to interact with Anaplan. This guide provides step-by-step instructions to create a dedicated service account in Anaplan and configure authentication.
Permissions required
Before you begin, make sure you have:
- Access to Anaplan as a User Administrator
- Workspace admin privileges in Anaplan
- A dedicated service account (not a personal account)
Create service account
Create a dedicated service account in Anaplan with workspace administration privileges. For detailed steps, see the Anaplan documentation for creating internal users.
- Sign in to Anaplan as a User Administrator.
- Go to Administration > Users > Internal, then select New.
- Enter the required user details.
- Choose a User license. Workspace admin is required because the connector uses restAPI to fetch modules that are available only to the workspace admin, as per Anaplan API documentation.
- Assign workspace access:
- Select the workspaces you plan to catalog in Atlan.
- To grant all workspaces, select the Workspace checkbox at the top of the list.
- Select Save.
Set up authentication
- Basic authentication
- CA Certificate
- Record the username and password for the service account. These credentials are needed to configure the connector in Atlan.
CA Certificate authentication uses an S/MIME certificate instead of a password to authenticate with Anaplan. For a complete overview, see Anaplan's Security certificates documentation.
Step 1: Procure S/MIME certificate
Obtain an S/MIME certificate (also called a client certificate or Personal Authentication certificate) from a supported Certificate Authority, or from an intermediary whose certificate chain terminates in a supported root CA. Submit a Certificate Signing Request (CSR) to your chosen provider to get the certificate.
For detailed procurement steps, see Procure CA certificates.
Anaplan only supports S/MIME certificates. SSL or server certificates aren't supported.
Step 2: Register certificate in Anaplan
Upload your certificate in .pem format to Anaplan:
- Sign in to Anaplan as an administrator.
- Go to Administration > Security > Certificates.
- Select Add Certificates.
- Click Choose File and select your
.pemcertificate file. - Select Import Certificates.
For more details, see Manage your certificates.
Step 3: Generate encoded data and signed data
Generate the encodedData and encodedSignedData values required for authentication:
encodedData: A randomly-generated string of at least 100 bytes, Base64-encoded.encodedSignedData: The random bytes signed with your private key, then Base64-encoded. Anaplan only supports theSHA512withRSAalgorithm for signing with your private key.
For detailed instructions on generating these values, see Use CA certificate authentication. For a sample Java implementation to generate these values, see Anaplan Authentication Service API.
Step 4: Prepare for Atlan configuration
Keep the following ready for configuring the Anaplan connector in Atlan:
- The CA certificate file in PEM format
- The
encodedDatavalue - The
encodedSignedDatavalue
Next steps
After creating your service account, continue with the crawl:
- Crawl Anaplan: Configure and run the crawler to catalog your Anaplan workspaces and models