When the Cloud Integration tenant has two or more worker nodes enabled for a tenant, an SAP NetWeaver ABAP based system may receive an "HTTP/1.1 403" authentication error when sending data through the Cloud Integration tenant.
The issue occurs randomly.
One known integration scenario where the issue can occur is: SAP on-premise CAR system -> Cloud Integration -> SAP Marketing Cloud
An example of HTTP log from the Cloud Integration tenant showing the issue on the CAR scenario above is:
<ip address> (<ip address>) - <S-user on CPI> [<date and time> +0000] GET <Service Endpoint, usually with query string> HTTP/1.1 200 59090 195 <Cloud Integration Tenant ID>.hana.ondemand.com:443 -
<ip address> (<ip address>) - <S-user on CPI> [<date and time> +0000] POST <Same Service Endpoint, usually with different query string> HTTP/1.1 403 796 253 <Cloud Integration Tenant ID>.hana.ondemand.com:443 -
-> there is always a GET followed by a POST
-> the GET always works (HTTP/1.1 200)
-> the POST fails (HTTP/1.1 403) if it is not processed by the same worker node that processed the GET
- Product independent
- Release independent
- Client/Server Technology - ICM (Internet Communication Manager)
- Cloud Integration
KBA , BC-CST-IC , Internet Communication Manager , CA-RT-CAR , SAP Customer Activity Repository , LOD-HCI-PI-OPS , Cloud Operations , Problem
About this pageThis is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).
Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.