3224701 - Error: Either the Client Certificate is not Configured Exactly Once in a Service Key of a Process Integration Runtime Service Instance or Client Certificate Authentication was not Enabled for your Tenant

You set up an event notification for Material, which should be triggered whenever a material is modified. It is supposed to send the notification to an iFlow running on the Integration Suite. However, the system is throwing an error that either the client certificate is not configured exactly once in a service key of a Process Integration Runtime service instance or client-certificate authentication was not enabled for your tenant client certificate.

SAP Business ByDesign

1.Go to the Application and User Management work center
2.Go to the Event Notification subview
3.Go to the Event Notification Monitoring screen
5.Result: Failed > Test > 401 - Unauthorized

Error: InvalidClientException><error>invalid_client</error><error_description>Either the client certificate is not configured exactly once in a service key of a Process Integration Runtime service instance or client-certificate authentication was not enabled for your tenant.

With every HTTP request for events, along with the HTTP request is also sent client-certificate, which helps during the TLS handshake. As the Authentication Method is selected as "User ID and Password", the maintained credentials shall be forwarded along with the HTTP request.

To enable the client-certificate authentication for the respective tenant, download Tenant Certificate following the steps below:

1.Go to the Application and User Management work center
2.Go to the section Input and Output management and select Communication Certificates
3.Click on the Download Tenant Certificate button

Event Notification Monitoring;  Authentication Method; Tenant Certificate , KBA , AP-RC-OUT , Output Management , Problem