Symptom
You need to setup Principal Propagation between SAP BTP Cloud Platform and an ABAP backend via the SAP Cloud Connector using a custom IdP.
After getting a 401 Unauthorized code in the Web IDE, you see one of the following errors appears in the Cloud Connnector logs:
#ERROR#com.sap.core.connectivity.protocol.http.handlers.HttpAuthenticationHandler#tunnel-client-5-4# #Unable to generate authorization token java.lang.IllegalStateException: The value for the required variable EMAIL is not available in context. |
or
#ERROR#com.sap.core.connectivity.protocol.http.handlers.HttpAuthenticationHandler#tunnel-client-18-9#0x34a8f271#Unable to generate authorization token java.lang.IllegalStateException: The variable 'null' needed for object EMAIL is not available in context. |
Read more...
Environment
- SAP Cloud Connector release independent;
- SAP BTP Cloud Platform;
- Custom IdP.
Product
Keywords
ADFS, certrule, strust, certificate, trust, mail, null, PP, principal Propagation, pattern, principal, propagation, idp, Identity provider, 401, unauthorized, mail, email, e-mail , KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , BC-NEO-SEC-IAM , Authentication, Authorization(Cloud Platform Neo) , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.
SAP Knowledge Base Article - Preview