3009509 - Error appears when redirecting from SAP Analytics Cloud (SAC) to SCP Identity Authentication Service (IAS) hosting on China Data Center

• Error appears when redirecting from SAP Analytics Cloud (SAC) to SCP Identity Authentication Service (IAS) hosting on China Data Center
• Error detail:
  

  尊敬的 SAP客户，
  由于法律合规的原因，您请求的网址已不再有效。请使用符合规范的域名 (*.accounts.sapcloud.cn) 访问您的服务。
  如果需要帮助，请联系您的IT支持。更多详细信息请参阅https://launchpad.support.sap.com/#/notes/3009508。
  我们对于给您带来的任何不便深表歉意。
  
  Due to compliance reasons the URL you requested is no longer available.
  Please use only compliant domains (*.accounts.sapcloud.cn) for accessing your services.
  In case you need assistance please contact your IT-Support. Relevant information: https://launchpad.support.sap.com/#/notes/3009508.
  We apologize for any inconvenience caused.

• SAP Analytics Cloud (Enterprise)
• SCP Identity Authentication Service (IAS) hosting on China Data Ceneter

1. Try to access SAC tenant with SAML SSO enabled to SCP IAS hosting on China Data Center.
   => Error appears when redirecting to SCP IAS (https://<IAS Tenant ID>.accounts.ondemand.com).

• The former domain of your IAS tenants in region Shanghai (China) - accounts.ondemand.com -has been stopped/retired since Nov 9, 2021. Now, your IAS tenants in region Shanghai (China) could only be accessed via the following domain: accounts.sapcloud.cn.=> See more detail from SAP KBA 3009508 - Things to know for domain change of IAS tenant running in region Shanghai (China)
• However, the new metadata of your IAS tenant is not imported in SAC, so SAC will still use former domain for authentication, which is no longer available.

Please update IAS metadata into SAC:

1. Download the new metadata from IAS side.
   
   
2. Import the downloaded new metadata into SAC.
• Update inside SAC (https://help.sap.com/viewer/00f68c2e08b941f081002fd3691d86a7/release/en-US/8c62c64b30a5413eb5196b1dbfc38af2.html)
• Using Identity Provider Administration tool (https://help.sap.com/viewer/00f68c2e08b941f081002fd3691d86a7/release/en-US/8eba80371d744a3abe145583d707d81a.html)
  
  
3. If parameter entityID in the metadata file is also changed, you may not be able to import the new metadata file because SAC will compare the new entityID from new uploaded metadata with the stored entityID.
   In this case, you may have to revert back to default IdP once and then re-configure SAML SSO between SAC and IAS using new metadata.

• 2569847 - Where can you find SAC user assistance (help) to use, configure, and operate it more effectively?
• Have a question? Ask it here and let our amazing SAP community help! Or reply and share your knowledge!
• 2487011 - What information do I need to provide when opening an case for SAP Analytics Cloud?
• 2511489 - Troubleshooting performance issues in SAP Analytics Cloud
• Search for SAP Analytics Cloud content using Google or Bing:
• https://www.google.ca/search?q=site%3Ahttps%3A%2F%2Fapps.support.sap.com+SAP+Analytics+Cloud
• https://www.bing.com/search?q=site%3Ahttps%3A%2F%2Fapps.support.sap.com+SAP+Analytics+Cloud
• Note: Add relevant text or warning/error messages to the text search field to filter results.
• SAP Analytics Cloud > Learning > Data Connections
• SAP Analytics Cloud > Learning > Guided Playlists
• SAP Analytics Cloud > Learning > Guided Playlists > Getting Support
• Need More Help? Contact Support or visit the solution finder today!

Your feedback is important to help us improve our knowledge base.

SAP Cloud for Planning, sc4p, c4p, cforp, cloudforplanning, Cloud for Analytics, Cloud4Analytics, CloudforAnalytics, Cloud 4 Planning, BOC, SAPBusinessObjectsCloud, BusinessObjectsCloud, BOBJcloud, BOCloud., SAC, SAP AC, Cloud-Analytics, CloudAnalytics, SAPCloudAnalytics,Error, Issue, System, Data, User, Unable, Access, Connection, Sac, Connector, Live, Acquisition, Up, Set, setup, Model, BW, Connect, Story, Tenant, Import, Failed, Using, Working, SAML, SSO, sapanalyticscloud, sap analytical cloud, sap analytical cloud, SAC, sap analyst cloud, connected, failure, stopped, IAS, SSO, Custom, IdP, 404, CN1, China, Not Found, URL, change, migration , KBA , cn1 domain migration of ias , sac cannot logon due to cn1 domain migra , sac tenant - not accessible - saml error , LOD-ANA-AUT , SAC Authentication / Login , Problem