Symptom
You need to setup Principal Propagation between SAP BTP Cloud Platform and an ABAP backend via the SAP Cloud Connector using a custom IdP.
After getting a 401 Unauthorized code in the Web IDE, you see one of the following errors appears in the Cloud Connnector logs:
#ERROR#com.sap.core.connectivity.protocol.http.handlers.HttpAuthenticationHandler#tunnel-client-5-4# #Unable to generate authorization token java.lang.IllegalStateException: The value for the required variable EMAIL is not available in context. |
or
#ERROR#com.sap.core.connectivity.protocol.http.handlers.HttpAuthenticationHandler#tunnel-client-18-9#0x34a8f271#Unable to generate authorization token java.lang.IllegalStateException: The variable 'null' needed for object EMAIL is not available in context. |
Read more...
Environment
- SAP Cloud Connector release independent;
- SAP BTP Cloud Platform;
- Custom IdP.
Product
Keywords
ADFS, certrule, strust, certificate, trust, mail, null, PP, principal Propagation, pattern, principal, propagation, idp, Identity provider, 401, unauthorized, mail, email, e-mail , KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , BC-NEO-SEC-IAM , Authentication, Authorization(Cloud Platform Neo) , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.