Symptom
When logging into SAP Analytics Cloud, the following error occurs: "Response doesn't have any valid assertion which would pass subject validation"
Environment
SAP Analytics Cloud (Enterprise)
Reproducing the Issue
- Open SAC URL.
- Enter credentials.
>> Notice the error "Response doesn't have any valid assertion which would pass subject validation".
Cause
The certificate of the custom IdP expired.
Resolution
- If there is no access available to SAC to maintain the latest IdP metadata using the self-service IdP Admin Tool, then refer to the KBA below:
2908073 - How to use the IdP Admin Tool to make changes to IdP Configuration in SAP Analytics Cloud - If this does not work, then generate a new certificate for the IdP, create a case with the 'LOD-ANA-AUT' component and attach the IdP metadata (e.g. FederationMetadata.xml) to the case.
See Also
- 2908073 - How to use the IdP Admin Tool to make changes to IdP Configuration in SAP Analytics Cloud
- 2761068 - Error: Login fails with StatusCode in ResponseMessage != OK; please refer to the database trace for more information in SAP Analytics Cloud (SAC)
- 2487567 - Troubleshooting SAML assertions when configuring SAML SSO in SAP Analytics Cloud (SAC)
- 2487116 - How to configure SAP Analytics Cloud SAML SSO using AD FS (Active Directory Federation Services)
- 2487011 - What information do I need to provide when opening an case for SAP Analytics Cloud?
- 2569847 - Where can you find SAC user assistance (help) to use, configure, and operate it more effectively?
- SAP Analytics Cloud administration community topic page - Authentication.
- SAP Analytics Cloud administration community topic page
- SAML authentication in SAP Analytics Cloud blog
Your feedback is important to help us improve our knowledge base.
Keywords
Product
SAP Analytics Cloud 1.0