Seamlessly and securely connect Savant to your SAP HANA instance via Theobald Xtract Universal.
Secure, seamless access to SAP S/4HANA via Theobald Xtract Universal
Many enterprises keep SAP HANA behind strict firewalls – and for good reason. Your most critical data deserves maximum protection.
Xtract Universal acts as a dedicated data‐layer service between SAP S/4HANA and downstream systems, abstracting complexity and avoiding any custom ABAP or manual exports. At the data layer it leverages SAP’s native Secure Network Communications (SNC) via SAP S/4HANA for mutual authentication and in‐flight encryption of every RFC or OData call. Its lightweight HTTP(S) listener and endpoint configuration live entirely within your network, requiring only simple DNS and firewall adjustments to expose data securely. Built-in scheduling, logging, and automated error handling at the data layer streamline extraction workflows and accelerate reliable, repeatable access to SAP S/4HANA data.
That’s why Savant integrates with Theobald’s Xtract Universal: so you can safely extract and analyze SAP HANA data without exposing your system to the public internet. Whether you’re operating on a tightly controlled internal network or enforcing host-level security, Savant keeps your ERP data secure and under control.
In this guide, we’ll walk you through configuring Xtract Universal to connect SAP HANA with Savant – securely, reliably and with zero compromise.
What is SAP S/4HANA?
SAP HANA is the central data platform behind many enterprise operations. It powers everything from finance and supply chain systems to customer insights and performance dashboards.
What makes it stand out is speed. Unlike traditional databases, SAP HANA stores and processes data in memory – so you can get real-time answers to complex questions, without waiting on long-running reports or exports. Whether you’re tracking sales trends, monitoring inventory, or analyzing operations across regions, SAP HANA helps you make faster, more informed decisions.
How does Savant securely connect to SAP S/4HANA?
Savant connects to SAP HANA through Theobald Xtract Universal, which runs on a Windows server inside your network. Here’s how it works:
Inside your network
Xtract Universal connects directly to your SAP HANA instance using SAP-approved drivers and credentials.
It makes the extracted data available via a local HTTP(S) endpoint (ex:
http://localhost:8065/...).
Making it accessible
You update the "localhost" URL to a DNS name or IP address that’s accessible within your network.
Then, whitelist Savant’s IPs in your firewall or Windows Defender so we can securely access it.
Savant’s role
Savant’s Connection Service reaches into your network over HTTPS – fully encrypted.
Once connected, data flows into Savant’s Analytic Engine, where it’s cached securely and ready for analysis.
Requirements
Whitelist Savant IPs
How to connect Savant to SAP S/4HANA via Theobald
Before you begin, make sure Theobald Xtract Universal is already installed, configured to extract from SAP S/4HANA. For installation help, refer to Theobald’s official documentation.
Once that’s ready, follow the steps below to let Savant securely access the data stream from Xtract:
Step1: Configure the SAP S/4HANA extraction
In Xtract Admin, create a new Data Provider → SAP HANA connection.
Select the Source type and enter your HANA host, instance number, port and credentials.
Test connectivity to confirm you can select tables or views.
Step2: Creating a Data Provider
Inside the Source created, click on New
Name the data provider and select the object from which data needs to be extracted
Select the Object from which the Data needs to be extracted
Add the table name
Select the objects which are needed in the data
Step3: Publish the localhost endpoint
In Xtract Server , go to Web Server Settings.
Enable the listener on port 8065 and select the protocol
Assign your extraction task(s) to that listener.
Run the extraction created and copy the generated URL
http://localhost:8065/start/SAPOrders/
Step 4: Expose the port 8065 of the Xtract server to Savant.
Choose your protocol: Decide whether you’ll use
http://orhttps://based on what has been enabled in Xtract Universal protocol.Pick your host: You can do this by giving it a public IP / DNS name. Work with your network/DNS team to assign a public IP (or DNS alias) to the Windows server that points at your Xtract server (eg. xtract.mycompany.com)
Append the port: After the host add
:8065to target the Xtract listener port.
Add the path: Finally, tack on the API path you need—often
/for root or something like/SAPOrders for orders.http://xtract.mycompany:8065/start/SAPOrders/
Step 5: Configure the connector in Savant via the API Connector Tool
Your network/DNS administrator (the official hostname or alias).
In your Savant workspace, go to Systems → New System.
Choose API Connector (
{…}icon ) as the connector type.Fill out the form:
URL
Method:
GETResult Format: Flat file
JSON Path: (leave blank unless needed)
Headers:
KeyValueAuthorizationBearer
Use Rate Limiting: optional
Use Pagination: only if your export is paged
Please refer to the below demo for the connection setup