SAP Knowledge Base Article - Preview

3278524 - Received 401 - Unauthorized: Access is denied due to invalid credentials attempting SSO to SSAS

Symptom

  • customers attempting to access MSAS / SSAS cubes received "401 - Unauthorized: Access is denied due to invalid credentials"
  • error in the MDAS logs was "NEGOTIATE authentication error: No valid credentials provided (Mechanism level: No valid credentials provided (Mechanism level: KDC cannot accommodate requested option (13)"
  • error in packet scan from BI server was "KRB Error: KRB5KDC_ERR_BADOPTION NT Status: STATUS_NO_MATCH"
  • further looking into the packet scan it was noticed the SSAS IIS SPN (HTTP/IISserver.IISdomain) was sending an incorrect domain name.


Read more...

Environment

SAP Business Intelligence Platform 4.2 or 4.3 version is not important as the issue is external to BI 

Product

SAP BusinessObjects Business Intelligence platform all versions

Keywords

KBA , BI-BIP-AUT , Authentication, ActiveDirectory, LDAP, SSO, Vintela , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.