3137235 - "Error: You were not automatically logged on to the remote data source. Please ask your administrator to verify the SAML Single Sign On configuration." in SAP Analytics Cloud (SAC)

Symptom

Schedule Publication for Story is failing with error:

Couldn't fetch artifact from story exporter service
"Error: You were not automatically logged on to the remote data source. Please ask your administrator to verify the SAML Single Sign On configuration."

Environment

SAP Analytics Cloud (Enterprise)
SAP Netweaver 7.5

Reproducing the Issue

Log in to SAC.
Go to Connections.
Create a Live data connection with Advanced Features, see help guide: Live Data Connections Advanced Features Using the Cloud Connector
When a story based on the connection is scheduled, the email is not coming through, it fails with the following information:
Couldn't fetch artifact from story exporter service
"Error: You were not automatically logged on to the remote data source. Please ask your administrator to verify the SAML Single Sign On configuration."

Cause

According to the ABAP security trace with ICM trace, the client certificate authentication is not triggered as the SAML authentication is the first one in the logon order:

N SAML-Trace: Starting SAML authentication for access to path: /sap/bw/ina/GetServerInfo

N SAML-Trace: Login methods list from ICF: AUTH_SAML,AUTH_FIELD,AUTH_CERT,AUTH_SSO,AUTH_ASSERT,AUTH_BASIC,AUTH_SAP,AUTH_SPNEGO,AUTH_SERVI

N SAML-Trace: Received configuration data:

It is why the 302 HTTP code is returned with SAML authentication request.

Resolution

In SICF select the /default_host/sap/bw/ina and /sap/bw/ina/GetServerInfo service

Select Logon Data tab.
Set the “Use All Logon Procedure” flag.
In the “Logon Procedure List” set the Standard Logon Order:

Logon Using HTTP Fields
Logon with SSL Certificate
Logon with SAP Logon/Assertion Ticket
Logon with SAP Assertion Ticket
HTTP Basic Authentication
Logon Using SAP User and Password (RFC Logon)
Logon Using SPNEGO
Logon Using SAML
Logon Using User Data Stored in Service

First test to create a Tunnel connection in SAC: Live Data Connection to SAP BW Using a Tunnel Connection
If it is working, test the Live data connection with Advanced Features.

For more details, see help guide: Standard Logon Order or Alternative Logon Order.

Keywords

SAP Cloud for Planning, sc4p, c4p, cforp, cloudforplanning, Cloud for Analytics, Cloud4Analytics, CloudforAnalytics, Cloud 4 Planning, BOC, SAPBusinessObjectsCloud, BusinessObjectsCloud, BOBJcloud, BOCloud., SAC, SAP AC, Cloud-Analytics, CloudAnalytics, SAPCloudAnalytics,Error, Issue, System, Data, User, Unable, Access, Connection, Sac, Connector, Live, Acquisition, Up, Set, setup, Model, BW, Connect, Story, Tenant, Import, Failed, Using, Working, SAML, SSO, sapanalyticscloud, sap analytical cloud, sap analytical cloud, SAC, sap analyst cloud, connected, failure, stopped, sap analyst cloud, https://hcs.cloud.sap, https://hanacloudservices.cloud.sap, https://cloudanalytics.accounts.ondemand.com, https://hanacloudservices-us.accounts.ondemand.com, https://www.sap.com, https://help.sap.com, predictive analytics (analysis), data analysis (analytics) tools, analytics tools, sap analytics cloud, data literacy, advanced analytics, data democratization, analytics software, real time analytics, self service analytics, advanced data analytics, analytics as a service, analytics cloud / cloud analytics, saas analytics, cloud bi, enterprise planning, cloud data analytics, cloud based analytics, analytics cloud platform, modern analytics, real time analysis, cloud analytics solution(s), what is sap analytics cloud, cloud analytics tools, analytics in the cloud, cloud analytics software , KBA , LOD-ANA-LDC-HAN , SAC Live Data Connection HANA , BC-MID-ICF , Internet Communication Framework , Problem

Product

SAP Analytics Cloud 1.0