> For the complete documentation index, see [llms.txt](https://docs.theconfigteam.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.theconfigteam.com/prebilt-for-public-cloud/installation-guide/minimum-baseline-setup.md).

# Minimum baseline setup

{% hint style="info" %}
**Note**

Before you can access the portal your customer account must have been setup (which will need to include a valid license) and you must have been sent an invitation via email to join your team on the portal.

To access the portal go to [https://admin.prebilt.cloud](https://admin.prebilt.cloud/)
{% endhint %}

{% embed url="<https://www.youtube.com/watch?v=8FZGx5qbLpw>" %}

## Minimum required setup

The initial setup for using PreBilt requires both setup in the Admin Portal as well as some setup in your SAP system for communications, as detailed below.

You will need to do the following steps at a minimum:

* Check you have a valid license defined.
* Define an SAP environment and link it to the required API URL.
* Setup the SAP communications as supported using the wizard on the Admin Portal.
* Define the device you will use to log into the PreBilt mobile solution.

## Check license

Select the "License Management" page from the left-hand navigation column and check you have an "active" license. You will not be able to create or edit you license, however you can update your company logo, if required.

{% hint style="warning" %}
Before you can use the PreBilt Mobile Solution you will need your license, as updated by a PreBilt administrator, to be active. You can continue with the portal setup without a license but you will not be able to access the mobile solution.
{% endhint %}

<div align="left"><figure><img src="https://4184484164-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUaCMQfK4rfAKqNC3twBf%2Fuploads%2FYZ46IxY5syKDwxZzVRuU%2Fimage.png?alt=media&amp;token=da2f807c-57d3-401e-8465-96dda8a669cc" alt=""><figcaption></figcaption></figure></div>

## Define an environment

{% hint style="info" %}
**Note**

You will eventually create an environment in the Admin Portal for each of SAP instances that you have, but initially you only need to set up for the environment you are starting out with, typically your "Starter" or "Development" system.
{% endhint %}

<figure><img src="https://4184484164-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUaCMQfK4rfAKqNC3twBf%2Fuploads%2FepfNo4CrZhbCHgLgAs65%2Fimage.png?alt=media&amp;token=76078386-aed2-4225-9ad4-303094825d50" alt=""><figcaption></figcaption></figure>

Create an environment to connect to your SAP system. Click on the “New Environment” button.

<div align="left"><figure><img src="https://4184484164-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUaCMQfK4rfAKqNC3twBf%2Fuploads%2FPMopxxLDUeBFF8gOEyy3%2Fimage.png?alt=media&amp;token=1d0f4969-929b-4712-9e04-c38b7977120e" alt="" width="286"><figcaption></figcaption></figure></div>

Enter the following in the popup and click on the “Create Environment” button to save:

* Name – this can be anything you want and you can change it after creation if required.
* ID – this must be unique within your customer space. **It cannot be changed after creation**.
* SAP System Identifier – this is to complete the API URL.
* Toggle to activate the environment that is linked to your SAP "production" environment.

{% hint style="info" %}
**Note**

If you do not have the SAP System Identifier to hand, you can edit and add it to the environment at a later date. Likewise, you can activate the "Production environment" later.
{% endhint %}

## Setup communications

Before you can activate PreBilt for Public Cloud you need to prepare your SAP system(s) to allow PreBilt to communicate with it.

From the Admin Portal, for a particular environment, you can follow the communications "Setup Guide" that can be accessed from the SAP System page (in the SAP Communication User section), which provides links to the relevant SAP transactions, or alternatively you can maintain each of the steps, as described here.

<div align="left"><figure><img src="https://4184484164-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUaCMQfK4rfAKqNC3twBf%2Fuploads%2FcbplvrlcaZe76Skv0bYy%2Fimage.png?alt=media&amp;token=957296b8-2e7e-480b-b517-e5918ba9a251" alt=""><figcaption></figcaption></figure></div>

{% stepper %}
{% step %}

### Create a communication user

Open **Maintain Communication Users** and create a new user.

Enter the user name and description as shown:

<div align="left"><figure><img src="https://4184484164-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUaCMQfK4rfAKqNC3twBf%2Fuploads%2FJpctOFb2xfe7bUocUBB9%2Fimage.png?alt=media&amp;token=78e21b6e-5eed-4ff6-b669-a93190128fb5" alt=""><figcaption></figcaption></figure></div>

Set a secure password using "**Propose Password"** or enter your own.

{% hint style="info" %}
**Note**

Copy this password — you will need it later to paste into the Admin Portal to make the connection.
{% endhint %}
{% endstep %}

{% step %}

### Create a communication system

Open **Communication Systems** and create a new entry.

Enter the system ID and system name as shown:

<div align="left"><figure><img src="https://4184484164-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUaCMQfK4rfAKqNC3twBf%2Fuploads%2Fn5IimfCOCPaqu3gRbRoL%2Fimage.png?alt=media&amp;token=ea766add-b21e-42fb-8e79-8e3b61c42c3c" alt=""><figcaption></figcaption></figure></div>

Tick the **Inbound Only** checkbox.

In the **Users for Inbound Communication** tab, add the communication user you created in step 1 (`PREBILT_ADMIN`).&#x20;

Leave all other fields at their defaults and save.
{% endstep %}

{% step %}

### Create a communication arrangement

Open **Communication Arrangements** and create a new arrangement.

Select the scenario "SAP\_COM\_0A48" and enter an arrangement name by suffixing the communication name on the end, as shown below.

Select the already created Communication System from step 2, and this will also copy in the Inbound Communication User into the appropriate fields.

Check that the Authentication Method is set to "User ID and password" and save.

<div align="left"><figure><img src="https://4184484164-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUaCMQfK4rfAKqNC3twBf%2Fuploads%2FbQ2KQpkENWFTaA0kXJQW%2Fimage.png?alt=media&amp;token=411ac65e-8f9b-4998-88db-a22f480c7e9e" alt=""><figcaption></figcaption></figure></div>

This links the scenario *Communication Management Integration* to your system and user. It's the minimum scope PreBilt's onboarding wizard needs to start. The wizard self-elevates with `SAP_COM_0889` afterwards.
{% endstep %}

{% step %}

### Configure CORS allowlist

The PreBilt mobile and admin apps call your SAP tenant directly from the browser. Add the PreBilt-hosted origins to the Cross-Origin Resource Sharing allowlist so the browser doesn't block them.

Open **Maintain Protection Allowlists** (Fiori app `F3195`), switch to the **Cross-Origin Resource Sharing** tab, and click **+** to add the allowed/trusted host names.

<div align="left"><figure><img src="https://4184484164-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUaCMQfK4rfAKqNC3twBf%2Fuploads%2F5bOgPCDzcMZvgrnHaU5V%2Fimage.png?alt=media&amp;token=117fd609-8c0b-4d5c-bfe7-011a59f6c60e" alt=""><figcaption></figcaption></figure></div>

Complete the following and then select "Add".

{% hint style="info" %}
**Note**

The list of trusted host names must be entered as a single string separated by commas.

**For Production**: enter the following domains (as a minimum) as the trusted host names into the Trusted Host Name field:

* prebilt.cloud,prerelease.prebilt.cloud

**For non-production SAP systems:** enter the following complete list in the Trusted Host Name field to support testing and developments:

* prebilt.cloud,prerelease.prebilt.cloud,test.prebilt.cloud,\*.theconfigteam.workers.dev,localhost,127.0.0.1
  {% endhint %}

* Enter the trusted host names (as shown above) as a string into **Trusted Host Name** field.

* Enter the following into **HTTP Service Path** field:
  * /sap/&#x20;

* Tick **all** nine boxes of the **Allowed Methods** (GET, POST, HEAD, PUT, PATCH, DELETE, TRACE, OPTIONS, CONNECT).

* Paste the following into the **Allowed Headers** field:
  * origin,Authorization,x-requested-with,content-type,content-length,accept,x-csrf-token,allow-failure,if-match,odata-maxversion,odata-version

* Paste the following into the **Exposed Headers** field:
  * x-csrf-token,etag,odata-version,sap-authenticated,sap-server,strict-transport-security,x-content-type-options,x-xss-protection

* Tick **Allow Credentials** and **Allow Private Network Access**.&#x20;

* Leave **Maximum Age** blank.
  {% endstep %}

{% step %}

### Save the communications password in the portal

In the Admin Portal, go to the SAP Communication User and save the password created in step 1.

<div align="left"><figure><img src="https://4184484164-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUaCMQfK4rfAKqNC3twBf%2Fuploads%2F8s3bHshhV4bXwD9kaPhh%2Fimage.png?alt=media&amp;token=c53308ea-56c8-49f7-8c39-793eb27a31cd" alt=""><figcaption></figcaption></figure></div>

Once the password is saved, you can then test the connection with the "**Test Connection**" button that will appear.
{% endstep %}

{% step %}

### Run the SAP automated onboarding script

Once you have a successful connection you can run the onboarding script which will check and activate all the relevant resources to allow communication between PreBilt and SAP.

<div align="left"><figure><img src="https://4184484164-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUaCMQfK4rfAKqNC3twBf%2Fuploads%2FQugwBDcPlzg6Ne6ea4pO%2Fimage.png?alt=media&amp;token=68f29d8d-84cd-4581-9606-8f3d3920c94a" alt=""><figcaption></figcaption></figure></div>

Click "**Run automated setup"** to let PreBilt create everything you require for communication.
{% endstep %}
{% endstepper %}

## Define a device

All devices which will be used to access the PreBilt for Public application, including desktop computers or laptops, will need to be defined in the portal.

{% hint style="info" %}
**Note**

Currently there is no mass upload facility. This will be developed in the future.
{% endhint %}

Make sure you have selected the appropriate environment and then go to the “Devices” page.

<figure><img src="https://4184484164-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUaCMQfK4rfAKqNC3twBf%2Fuploads%2FbOtrE318xzBWAlKe6KrP%2Fimage.png?alt=media&amp;token=b244169c-5c29-41e7-a1c9-c21697390aa2" alt=""><figcaption></figcaption></figure>

Click on the “New Device” button to create. In the popup enter a unique Device Name and click on “Create Device”.

<div align="left"><figure><img src="https://4184484164-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUaCMQfK4rfAKqNC3twBf%2Fuploads%2FRL3ImBgKbnx96TvpcSgS%2Fimage.png?alt=media&amp;token=9b08936a-bf21-4f16-ab11-a74d0688138a" alt="" width="217"><figcaption></figcaption></figure></div>

{% hint style="info" %}
**Note**

The Device Name cannot be changed after creation.
{% endhint %}

After creating the device you can select it for login by clicking on the ellipsis menu for the particular device.

<div align="left"><figure><img src="https://4184484164-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUaCMQfK4rfAKqNC3twBf%2Fuploads%2FF8sQxvTtn3Wq5NNoRYNG%2Fimage.png?alt=media&amp;token=d9003059-86b9-48a2-8f5c-5183b7314cf4" alt=""><figcaption></figcaption></figure></div>

<div align="left"><figure><img src="https://4184484164-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUaCMQfK4rfAKqNC3twBf%2Fuploads%2FZWdAxZEFxI4TkmXXT9lu%2Fimage.png?alt=media&amp;token=799ae3f0-761f-4cc4-ad82-768f4b56301c" alt="" width="133"><figcaption></figcaption></figure></div>

Select the “Login” option.

From there you can access the QR code or the Magic Link for the login process.

<div align="left"><figure><img src="https://4184484164-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUaCMQfK4rfAKqNC3twBf%2Fuploads%2FE7he7boNK255JFLyN8mV%2Fimage.png?alt=media&amp;token=dd19ea76-aef9-437a-83cf-d7963ba5e703" alt="" width="216"><figcaption></figcaption></figure></div>

Once logged on the user of the device will be presented with the supplied baseline transactions with the baseline configuration.

If more than one WM warehouse is defined in the SAP system then the user will be forced to select one before proceeding to the baseline menu.

{% hint style="warning" %}
**Note**

Doing only the above basic setup (*which does not include the transactions and menus setup*) means that the menu and the transactions are taken from the "demo" application and so some of the default configuration may be missing or not compatible with what you have in your SAP system – for example queue names - and you cannot make any transaction configuration updates. To make configuration changes, load the out-of-the-box transactions and the out-of-the-box menu in the required environment as detailed in the [Admin Portal operational setup](/prebilt-for-public-cloud/installation-guide/admin-portal-operational-setup.md#out-of-the-box-transactions) page.
{% endhint %}