SAP Knowledge Base Article - Preview

3278524 - Received 401 - Unauthorized: Access is denied due to invalid credentials attempting SSO to SSAS

Symptom

  • customers attempting to access MSAS / SSAS cubes received "401 - Unauthorized: Access is denied due to invalid credentials"
  • error in the MDAS logs was "NEGOTIATE authentication error: No valid credentials provided (Mechanism level: No valid credentials provided (Mechanism level: KDC cannot accommodate requested option (13)"
  • error in packet scan from BI server was "KRB Error: KRB5KDC_ERR_BADOPTION NT Status: STATUS_NO_MATCH"
  • further looking into the packet scan it was noticed the SSAS IIS SPN (HTTP/IISserver.IISdomain) was sending an incorrect domain name.


Read more...

Environment

SAP Business Intelligence Platform 4.2 or 4.3 version is not important as the issue is external to BI 

Keywords

KBA , BI-BIP-AUT , Authentication, ActiveDirectory, LDAP, SSO, Vintela , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.