## Set up Anaplan

URL: https://docs.atlan.com/apps/connectors/business-intelligence/anaplan/how-tos/set-up-anaplan

> Configure Basic or CA Certificate authentication to connect Anaplan to Atlan.

Atlan uses Basic or CA Certificate authentication to interact with Anaplan. This guide provides step-by-step instructions to create a dedicated service account in Anaplan and configure authentication.

## Permissions required

Before you begin, make sure you have:
* Access to Anaplan as a User Administrator
* Workspace admin privileges in Anaplan
* A dedicated service account (not a personal account)

## Create service account

Create a dedicated service account in Anaplan with [workspace administration](https://help.anaplan.com/workspace-administration-6ed59998-91ce-4a3a-ab64-8f57d1c1ce09) privileges. For detailed steps, see the [Anaplan documentation for creating internal users](https://help.anaplan.com/create-an-internal-user-3589348b-48de-49e4-9f6c-595f273efb4b).

1. Sign in to Anaplan as a User Administrator.
2. Go to **Administration** > **Users** > **Internal**, then select **New**.
3. Enter the required user details.
4. Choose a **User license**. **Workspace admin** is required because the connector uses restAPI to fetch modules that are available only to the workspace admin, as per [Anaplan API documentation](https://anaplan.docs.apiary.io/#RetrieveIDNamesModuleModel).
5. Assign workspace access:
 - Select the workspaces you plan to catalog in Atlan.
 - To grant all workspaces, select the **Workspace** checkbox at the top of the list.
6. Select **Save**.

## Set up authentication

### Basic authentication

1. Record the username and password for the service account. These credentials are needed to configure the connector in Atlan.

### CA Certificate

CA Certificate authentication uses an S/MIME certificate instead of a password to authenticate with Anaplan. For a complete overview, see Anaplan's [Security certificates](https://help.anaplan.com/security-certificates-f1c47baa-32f0-4221-a134-089907d77d4e) documentation.

### Step 1: Procure S/MIME certificate

Obtain an S/MIME certificate (also called a client certificate or Personal Authentication certificate) from a [supported Certificate Authority](https://help.anaplan.com/supported-root-ca-certificates-with-anaplan-4475afaf-4c2f-4728-b0e9-a1db858b79f6), or from an intermediary whose certificate chain terminates in a supported root CA. Submit a Certificate Signing Request (CSR) to your chosen provider to get the certificate.

For detailed procurement steps, see [Procure CA certificates](https://help.anaplan.com/procure-ca-certificates-47842267-2cb3-4e38-90bf-13b1632bcd44).

:::info
Anaplan only supports S/MIME certificates. SSL or server certificates aren't supported.
:::

### Step 2: Register certificate in Anaplan

Upload your certificate in `.pem` format to Anaplan:

1. Sign in to Anaplan as an administrator.
2. Go to **Administration** > **Security** > **Certificates**.
3. Select **Add Certificates**.
4. Click **Choose File** and select your `.pem` certificate file.
5. Select **Import Certificates**.

For more details, see [Manage your certificates](https://help.anaplan.com/manage-your-certificates-8c9be2de-5c55-47d7-b69a-686b09cf05f5).

### Step 3: Generate encoded data and signed data

Generate the `encodedData` and `encodedSignedData` values required for authentication:

- **`encodedData`**: A randomly-generated string of at least 100 bytes, Base64-encoded.
- **`encodedSignedData`**: The random bytes signed with your private key, then Base64-encoded. Anaplan only supports the `SHA512withRSA` algorithm for signing with your private key.

For detailed instructions on generating these values, see [Use CA certificate authentication](https://help.anaplan.com/use-ca-certificate-authentication-1493b16d-7294-47d6-bd8d-056962e9b8da). For a sample Java implementation to generate these values, see [Anaplan Authentication Service API](https://anaplanauthentication.docs.apiary.io/#/reference/create-authentication-tokens).

### Step 4: Prepare for Atlan configuration

Keep the following ready for configuring the Anaplan connector in Atlan:
- The CA certificate file in PEM format
- The `encodedData` value
- The `encodedSignedData` value

## Next steps

After creating your service account, continue with the crawl:

* [Crawl Anaplan](https://docs.atlan.com/llms/connectors/anaplan/crawl-anaplan/llms.txt): Configure and run the crawler to catalog your Anaplan workspaces and models

---