2461997 - Adding Neo subaccount to SAP Cloud Connector fails due to authorization error

When adding an SAP BTP Neo subaccount to SAP Cloud Connector, following error is displayed on the screen:

<417 An authorization problem occurred when downloading the configuration. Check the spelling of the subaccount name, user, and password — see ''Logs'' for details>

Upon checking SCC trace (ljs_trace.log) for details, either of following error can be seen:

(1)
#WARN#com.sap.scc.config#<xxx># #Creating an sslContextProvider for account <subaccount>@<region> without SSLContext. Keystore did not contain a certificate.|

#INFO#com.sap.scc.security#<xxx># #New RSA keypair was generated. Key size used: 4096|
#INFO#com.sap.scc.security#<xxx># #Will retrieve Connectivity CA certificate from SAP HANA Cloud|
#INFO#com.sap.scc.security#<xxx># #Executing Http Get request to https://connectivitycertsigning.<region>:443/certificate/management/v1/trusted/ca/account/<subaccount>|
#WARN#org.apache.http.impl.client.DefaultHttpClient#<xxx># #Authentication error: basic authorization challenge expected, but not found|
#INFO#com.sap.scc.security#<xxx># #Returned Http Response with code 401|
#WARN#com.sap.scc.rt#<xxx># #sccEndpoint com.sap.scc.config.TunnelSccEndpoint@28b5783c ok, and context == null|
#ERROR#com.sap.scc.ui#<xxx># #SCC handshake failed: 401 - Unauthorized
com.sap.scc.servlets.SccHandshakeException: SCC handshake failed: 401 - Unauthorized

(2)
ERROR#com.sap.scc#<xxx># #SCC handshake failed: 403
com.sap.scc.servlets.SccHandshakeException: SCC handshake failed: 403

Note: In case of a Cloud Foundry subaccount, refer to KBA 2571763 instead.

• SAP Cloud Connector release independent;
• SAP BTP Neo environment;
• Identity Authentication.

scc s-user, com.sap.core.connectivity.tunnel.core.handshake.TunnelHandshakeException: Invalid status of handshake response: 401 Unauthorized, 403, tunnel, sub-account, subaccount, failed, denied, PKIX, TLS, termination, certificate, S-user, Suser, account, authentication, exception, authorization, expired, refresh, update , KBA , unable to add a cloud foundry , subaccount(sac) in sap cloud connector , sac , cc , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , BC-NEO-SEC-IAM , Authentication, Authorization(Cloud Platform Neo) , Problem