2727260 - SAP Cloud Connector - Principal propagation: "CN is not available in context"

Symptom

Principal propagation is configured on your SAP BTP application, however SAP Cloud Connector(SCC) cannot create a client certificate for the user.
From SCC trace (ljs_trace.log / scc_core.trc) the following error messages are percieved:

#ERROR#com.sap.core.connectivity.protocol.http.handlers.HttpRequestStateHandler#tunnel-client-117-8#0x5e27c6c0#Unexpected HTTP error:
com.sap.core.connectivity.protocol.http.handlers.HttpProtocolException: Unable to generate authorization token for user <user> on system <system>:<port>.

...

#ERROR#com.sap.core.connectivity.protocol.http.handlers.HttpAuthenticationHandler#tunnel-client-117-8#0x5e27c6c0#Unable to generate authorization token
java.lang.IllegalStateException: The variable '<name or null>' needed for object CN is not available in context.

Environment

SAP Business Technology Platform;
SAP Cloud Connector release independent.

Product

SAP Connectivity service 2.0 ; cloud connector 1.0 for SAP HANA Cloud Platform

Keywords

SCC, Cloud Connector, Connector, principal propagation, common name, login_name, first_name, last_name_ mail, SAML, token, CN, Identity Provider, IDP, ljs_trace, ljs, trace, variable, null, object, not available, context, assertion, scp, sap cloud platform, PKIX, Subject pattern, pattern, sample, certificate, cert, .pem, PP, Principal, CERTRULE, trusted_reverse_proxy_0, trust_client_with_issuer, trust_client_with_subject, $name, $email, $mail, $display_name, $login_name, CA, Cerificate authority, idp , KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , BC-NEO-CON , Neo to On-premise Connectivity service , BC-CP-CON-CF , Cloud Foundry to On-premise Connectivity service , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.