3056284 - Intermittent issues with Webi reports using SSO via STS

• This issue was observed in a large distributed environment
• Some errors in the DSL logs were 

invoke(): irrecoverable exception

getErrorMessage(): cannot obtain string. bundle: com/crystaldecisions/sdk/exception/internal/ServerMsgResources, strID: null_code
java.util.MissingResourceException: Can't find resource for bundle java.util.PropertyResourceBundle, key null_code

SSO token or User password is empty.

Failed to connect to the OLAP source.

com.businessobjects.mds.olap.OlapException: com.businessobjects.mds.olap.OlapException: [Internal] SSO token or User password is empty.

• Some errors in the STS logs were 

STS: server session not set yet, maybe the magic server token hasn't be set?

Exception raised from SecurityTokenService.getSAPAssertionTicketEx

• To note in these issues the DSL and STS services were on different nodes making it difficult to trace without a proper end to end

This issue could also appear when BI connects to HANA via SAML. Symptoms change a bit such as 

• intermittent failures when testing HANA SAML SSO in the CMC
• intermittent failures for reports using HANA SAML SSO connections
• intermittent connection test in IDT when using HANA SAML
• intermittent generic errors com.sap.db.jdbc.exceptions.SQLInvalidAuthorizationSpecExceptionSapDB: [10]: authentication failed
   

SAP Business Intelligence Platform 4.3 but could occur in other environments

KBA , BI-BIP-ADM , BI Servers, security, Crystal Reports in Launchpad , BI-RA-WBI , Web Intelligence , BI-BIP-AUT , Authentication, ActiveDirectory, LDAP, SSO, Vintela , Problem