SAP Knowledge Base Article - Preview

3281088 - Delete user from BTP Cloud Foundry subaccount fails with error "Failed to delete the user (400)"

Symptom

You have configured Custom Identity Provider for Platform Users as per Establish Trust and Federation of Custom Identity Providers for Platform Users [Feature Set B] in Cloud Foundry (CF) subaccount with Feature Set B.

Now you want to delete all S-users from Default Identity Provider (SAP IDS). You were able to delete other S-user as long as there was one S-user with role collection "Subaccount Administrator".
However, when trying to delete the last S-user, it ends with the following error:

Failed to delete the user (400) - Please reference the correlation ID <xx> in the support ticket.

as following image:
delete_last_s_user_fail.png

When trying to remove role collection "Subaccount Administrator" from the last S-user, it fails with error:

The role collections have not been successfully updated.

as following image:
delete_role_collection_fail.png

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."


Read more...

Environment

  • SAP Business Technology Platform Cloud Foundry - BTP CF
  • Feature Set B

Product

BTP 1.00

Keywords

s user, suser, ids user, sap user, SAP-managed identity providers,sap.ldap, ias, identity authentication service, custom idp, failed to delete the user (400), role collections have not been successfully updated , KBA , BC-CP-CF-SEC-IAM , UAA, Authentication, Authorization, Trust Mgmnt , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.