2881703 - XSA user creation fails - [10]: authentication failed - Check if user administrator has JWT mapping defined

Creating new XS advanced users or assigning role collections by means of the XSA Cockpit fails with "authentication failed". You can see the following entries in uaa.log:

[...]
IdentityZone: uaa correlation_id: - [https-jsse-nio-127.0.0.1-30031-exec-140] .... INFO --- HANAUaaUserDatabase: SQL execution failed: [10]: authentication failed
IdentityZone: uaa correlation_id: - [https-jsse-nio-127.0.0.1-30031-exec-140] .... WARN --- HANAUserController: Check if user administrator has JWT mapping defined
[...]

• SAP HANA Extended Application Services, Advanced model
• XSA Cockpit

XS Advanced Cockpit, XS Advanced, authentication failed, xsuaa, uaa , KBA , BC-XS-SEC , UAA and Security for HANA XSA engine , BC-XS-ADM , Admin Tools , Problem