2667924 - Access denied to resource ... on system ... In case this was a valid request, ensure to expose the resource correctly in your cloud connector.

A BTP cloud application fails to connect to a backend system that was exposed in SAP Cloud Connector mapping (SCC -> "Cloud to On-Premise" -> "ACCESS CONTROL"), and from SCC trace (ljs_trace.log / scc_core.trc), one of the following errors are captured:

• "Access denied to resource ... on system ... In case this was a valid request, ensure to expose the resource correctly in your cloud connector";
  
  
• "Access denied to system <hostname:port> In case this was a valid request, ensure to expose the system correctly in your cloud connector";
  
  
• "[RFC] error open connection: Opening connection to backend failed: Opening connection to <hostname:port> denied. Expose the system in your Cloud Connector in case it was a valid request".
  
  
  

Some applications may also raise a Forbidden response (HTTP Status Code 403), while in the cloud connector trace (ljs_trace.log / scc_core.trc) with DEBUG level, the below message is visible:

• Mapping for virtual host <hostname:port> not found"
  
  

*Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.

• SAP Cloud Connector(SCC) release independent;
• SAP Business Technology Platform(BTP).

Access, denied, resource, backend, cloud connector, mapping , Acccess denied to system , Request failed with status code 403, Acccess denied to resource , on system,  Backend is not available in the list of defined system mappings in Cloud connector, access denied, resource, Location Id, multiple sub-accounts, same location id, forbidden, BTP, business Technology platform, SCC, connector, BTP destination, destination , KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , BC-CP-CON , Cloud to On-premise Connectivity service , DS-DI-CON , Connections , Problem