3131265 - S/4HANA Cloud Groups (Roles) provisioning with Identity Provisioning fails with the error 401

Symptom

When provisioning from S/4HANA Cloud to a target system the users and groups (roles) are read from S/4HANA Cloud system, users are provisioned successfully, but groups (roles) are not.

The following error is seen in the Identity Provisioning Job logs:

----------------

HTTP operation failed invoking https://<S4HanaCloudsystem>-api.s4hana.ondemand.com/sap/opu/odata/sap/APS_IAM_SIAG_BROLE_SRV/Aps_Iam_xx?$top=100&$skip=0&$expand=to_BusinessUserAssignment&$select=ID,to_BusinessUserAssignment/PersonID,Description with statusCode: 401, Response: <html><head><meta http-equiv=\"content-type\" content=\"text/html; charset=windows-1252\"><title>Login failed</title><style>body { background: #ffffff; text-align: center; width:100%; height:100%; overflow:hidden; }.content { display: table; position:absolute; width:100%; height:80%; }.valigned { display: table-cell; vertical-align: middle; }.lowerCenter { display: table-cell; vertical-align: bottom; }.footer { position: absolute; bottom: 0; left: 0; width: 100%; z-index: -1; }.footerLeft { float: left; margin-left: 20px; }.footerRight { float: right; margin-right: 20px; position: absolute; bottom: 0px; right: 0px; }.centerText { font-style: normal; font-family: Arial; font-size: 26px; color: #444444; z-index: 1; }.errorTextHeader { font-style: normal; font-family: Arial; font-size: 40px; color: #444444; }.bottomText { align: center; font-style: normal; font-family: Arial; font-size: 14px; color: #444444; }.biggerBottomText { align: center; font-style: normal; font-family: Arial; font-size: 16px; color: #444444; }.detailTable { align: bottom; vertical-align: middle; margin-left:auto; margin-right:auto; font-style: normal; font-family: Arial; font-size: 16px; color: #444444; }</style></head><body><div class=\"content\"><div class=\"valigned\"><p class=\"centerText\"><span class=\"errorTextHeader\"> 401 Not authorized </span></p></div></div><div class=\"footer\"><div class=\"footerLeft\"><img width='150' height='80' title='

----------------

Environment

Identity Provisioning.
S/4HANA Cloud as source system.

Product

Identity Provisioning 1.0

Keywords

IPS s4c s4hana 401 groups roles group role S/4HANA , KBA , BC-IAM-IPS , Identity Provisioning Service (IPS) , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.