Two separate authentication types are used, basic authentication and principal propagation.
The offline functionality works if only basic authentication is used, however when principal propagation is picked offline operations can't be completed successfully.
Offline operations fail against the local store when principal propagation is selected as authentication method.
The following error can be seen in SCPms service logs:
Failed to start the app: Failed to provision the local store: [-10210] The operation failed due to an error on the server: -857 (SERVER_SYNCHRONIZATION_ERROR) ([-10225] Message: User exception: [-100025] An error occurred while communicating with the OData server to retrieve the result of request "https://flpnwc-xxxxxx.dispatcher.hana.ondemand.com:443/sap/fiori/xxxxxx/sap/opu/odata/sap/XXY_ZYY_SRV/$metadata".Error caused by : [-100010] Retrieve metadata failed because the OData server returned HTTP Code, 401, with message null) Denied principal propagation to zxy-xy-sap-db.de:44343 due to invalid token for account:///xxxxxxx
In the SAP Cloud Connector logs the following entry can be seen:
#DEBUG#com.sap.core.connectivity.tunnel.client.sso.SSOClientProcessor#tunnel-client-45-2#0xef82b372#SSO token validation failed. com.sap.core.connectivity.tunnel.client.sso.InvalidSSOTokenException: The account/application/type services/dispatcher/JAVA is not trusted for principal propagation!
- SAP Mobile Platform (SMP) SDK 3.0 SP and PL level agnostic
- SAP Cloud Platform Mobile Services for Development and Operations
- SAP Cloud Connector
Mobile Operations & Development ; SMP SDK; APK; Fiori Cloud Build; scp, cp, scpms, cpms, hcpms, hcp , KBA , MOB-CLD-SEC , CP mobile service for dev & ops security , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , Problem
About this pageThis is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).
Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.