At the end of December, 2019, any authentication certificates generated using the Certificates app in the Anaplan My Account page will no longer be supported by Anaplan. The certificates will technically continue working till Feb 25th 2020, but Anaplan support team will not accept support tickets for these Certificates. Anaplan will not be issuing new certificates at the end of this year. If you are using an Anaplan issued certificate, you will need to take action.
Integration Client
|
Current Authentication Method
|
Action Required?
|
---|---|---|
Anaplan Connect 1.3.3.5 or lower | Anaplan Certificate | Yes |
Informatica Anaplan Connector | Anaplan Certificate | Yes |
Snaplogic 1.x | Anaplan Certificate | Yes |
Tableau 1.0 | Anaplan Certificate | Yes |
Any client | Anaplan Certificate | Yes |
Anaplan Connect 1.4.x |
Basic Authentication \ CA Certificate |
No |
Informatica Anaplan Connector |
Basic Authentication \ CA Certificate |
No |
Mulesoft 2.x |
Basic Authentication \ CA Certificate |
No |
Snaplogic 2.x |
Basic Authentication \ CA Certificate |
No |
Boomi 1.x | Basic Authentication | No |
Boomi 2.x |
Basic Authentication \ CA Certificate |
No |
Any client |
Basic Authentication \ CA Certificate |
No |
If your integration client and authentication method has a "Yes" in the "Action Required" column, then you must take action prior to December-end, 2019 to prevent disruption to your integrations.
Note that web login, web SSO, and basic authentication to integrations are not impacted by this event. We recommend that you make changes as possible and give yourself time to update & test your integrations.
Anaplan issued certificates will not be supported beyond end of Dec-2019, and will also not be renewed. Please note that, although Anaplan issued certificates show an expiry date of Feb 25th 2020, Anaplan will not provide support for them beyond end of Dec-2019.
As the Anaplan platform evolves, we are always looking to provide our customers with more features and ways to integrate with Anaplan. The new Anaplan APIs and integration connectors leverage Certificate Authority (CA) issued certificates. Certificate Authority (CA) authentication offers a certificate hierarchy known as the "chain of trust" that enables you to verify the validity of a certificate issuer. This aligns with industry standards and provides a higher level of security for Anaplan customers.
This change will impact your integrations if you are using Anaplan Certificates for authentication. After December 2019, you will have 2 options to continue running your integrations:
No, the expiration date for a certificate cannot be changed. The date is fixed to Feb 25th 2020.
As the Anaplan platform evolves, we are always looking to provide our customers with more features and ways to integrate with Anaplan. The new Anaplan APIs and integration connectors leverage Certificate Authority (CA) issued certificates. CA authentication offers a certificate hierarchy known as the "chain of trust" that enables you to verify the validity of a certificate issuer. This aligns with industry standards and provides a higher level of security for Anaplan customers.
Anaplan Connector for MuleSoft | CA Authentication support is available. |
Anaplan HyperConnect | CA Authentication support is available. |
Anaplan Connector for Informatica Cloud | CA Authentication support is available. |
Anaplan Connector for Boomi | CA Authentication support is available. Please contact DELL for more details. |
Anaplan SnapLogic Integration | CA Authentication support is available. Please contact SnapLogic for more details. |
Tableau Connector for Anaplan | Contact your Tableau representative for the updated connector availability date. |
Note: consult individual user guides for any additional steps required to implement CA certificates in Anaplan.
The following links will guide you through the procurement and registration of CA-issued certificates in Anaplan:
Users can use certificates issued by an Intermediary CA with any of these supported Root CAs.
Note that certificates from an Intermediary CA are typically managed by staff in your organization. If you are unsure about whether your intermediary certificate uses a supported Root CA, contact your internal IT staff.
You can obtain a CA certificate from your internal intermediary CA or purchase certificates from a Certificate Authority.
If you have an intermediate CA, you can issue the certificate yourself. Your IT team can advise on your internal processes for obtaining certificates based on an intermediate CA.
Accessing Anaplan via a browser with standard login or with SSO is not impacted by this change. This change only affects data integration clients.
Anaplan has two versions of Production REST APIs - v1.3 & v2.0. Anaplan Integration clients use one or both APIs. Authentication mechanisms with both API versions are:
More information about the v2.0 Integration API can be found here: https://anaplanbulkapi20.docs.apiary.io
If you are using Basic Auth (user ID and password) in AC 1.3.x.x. scripts, you can continue to do so. You can upgrade to AC 1.4.x at your convenience.
If you are currently using an Anaplan issued certificate, one option is to keep both AC 1.3.x.x and AC 1.4.x installed at the same time, and migrate your integration scripts one-by-one to AC 1.4.x prior to the end of the year.
AC 1.4.x supports authentication with CA Certificates and Basic Auth. Existing Anaplan Certificates (downloaded from Anaplan UI) are not compatible with AC 1.4.x. Please review this blog post for steps to port AC 1.3.x.x Integration scripts to AC 1.4.x: https://community.anaplan.com/t5/Knowledge-Base/Migrating-from-Anaplan-Connect-1-3-x-x-to-Anaplan-Co...
You can take the Anaplan Connect online training from Anaplan Academy: https://community.anaplan.com/t5/Academy-Classes/Data-Related-Training-Classes/ta-p/19566
You can find the Anaplan Connect 1.3.3.5 user guide here.
Starting AC 1.4.1, JAVA keystore (JKS) has been made optional. Users can directly refer to CA certificate files in their integration scripts or create a JKS if they prefer. Refer to 'Certificate Authentication' section of AC 1.4.x user guide for more details & implementation steps: https://s3.amazonaws.com/anaplanenablement/Community/Anapedia/Anaplan_Connect.pdf
You can refer to following sources for information on creating JAVA keystore for use with Anaplan Connect v1.4.x:
Additionally, you can refer to the full Anaplan Connect online training at Anaplan Academy: https://community.anaplan.com/t5/Academy-Classes/Data-Related-Training-Classes/ta-p/19566
Please post your questions in the Anaplan-Generated Certificates to Expire at the End of 2019 Discussion topic. Alternatively, you can contact your Anaplan Customer Success (CS) Business Partner, they will relay the question to the right contact.