2671418 - Test SAML SSO to HANA connection failed in Central Management Console (CMC)

• After configuration of SAML SSO to HANA from BI , clicking the "Test Connection" in BI Platform Central Management Console (CMC), it returns
  "Connection Failed: The test of the HANA SSO ticket used to log onto the HANA DB has failed due to: [10]: authentication failed. (FWM 02133)" error.

• Senario 1
  In HANA indexserver trace file, the following errors output:

        Authentication ManagerAcceptor.cpp(00040) : Prepare authentication: adding available methods
        Authentication Manager.cpp(00095) : getMechs: provided mechanism=SPNEGO
        Authentication Manager.cpp(00095) : getMechs: provided mechanism=Kerberos 5
        Authentication Method.cpp(00409) : Prepare authentication: added method GSS
        Authentication Method.cpp(00409) : Prepare authentication: added method SAML
        Authentication Method.cpp(00409) : Prepare authentication: added method SAPLogon
        Authentication Method.cpp(00409) : Prepare authentication: added method SessionCookie
        Authentication Method.cpp(00409) : Prepare authentication: added method SCRAMSHA256
        Authentication ManagerAcceptor.cpp(00272) : Injecting logon name into method:
        Authentication SAMLAuthenticator.cpp(01830) : SAML Response Destination ignored
        Authentication SAMLAuthenticator.cpp(00687) : PSE Store Manager initialized, try to obtain PSE store for SAML
        Authentication SAMLAuthenticator.cpp(00693) : No in-memory PSE store for SAML - fallback to system trust store

• Senario 2
  In HANA indexserver trace file, the following errors output:
  
  

  Authentication MethodSAML.cpp(00137) : unsuccessful login attempt with SAML ticket!
  Authentication ManagerAcceptor.cpp(00286) : evaluate was not successful for method: SAML
  Authentication MethodGSS.cpp(00080) : GSS isApplicableToken with input length 3437
  Authentication ManagerAcceptor.cpp(00277) : Method is applicable: SAPLogon
  Authentication ManagerAcceptor.cpp(00279) : Injecting logon name into method:
  Authentication SAPLogonManager.cpp(00282) : PSE Store Manager initialized, try to obtain PSE store for SAPLOGON
  Authentication SAPLogonManager.cpp(00290) : Using file-based PSE store for SAPLOGON
  Authentication SAPLogonManager.cpp(00296) : Store chosen for assertion ticket validation: saplogon.pse
  Authentication SAPLogonManager.cpp(00420) : The base64 decode of the received ticket failed. SSO_RC return value: 1281
  Authentication SAPLogonManager.cpp(00429) : Use SSO Validation PSE >>>saplogon.pse<<<
  Authentication MethodSAPLogon.cpp(00149) : unsuccessful login attempt with SAPLogon/SAPAssertion ticket!
  Authentication ManagerAcceptor.cpp(00286) : evaluate was not successful for method: SAPLogon
  Authentication MethodGSS.cpp(00080) : GSS isApplicableToken with input length 79
  Authentication ManagerAcceptor.cpp(00277) : Method is applicable: SCRAMSHA256
  Authentication ManagerAcceptor.cpp(00279) : Injecting logon name into method:
  Authentication ManagerAcceptor.cpp(00290) : evaluate was successful for method: SCRAMSHA256
  Authentication ManagerAcceptor.cpp(00333) : follow up request needed
  Authentication ManagerAcceptor.cpp(00359) : Method is applicable: SCRAMSHA256
  Authentication ManagerAcceptor.cpp(00368) : evaluate was not successful for method: SCRAMSHA256
  Authentication Connection.cc(03976) : [PRE AUTHENTICATION] logon name:
  Authentication Connection.cc(04043) : [POST AUTHENTICATION] logon name:
  Authentication Connection.cc(03213) : exception during authentication: ERROR [SQL-10] authentication failed

SAP BusinessObjects Business Intelligence Platform 4.x

4.1, 4.2, 4.3, SPNEGO, Kerberos, FWM 02133, 02133, HANA SSO , KBA , BI-BIP-AUT , Authentication, ActiveDirectory, LDAP, SSO, Vintela , Problem