Symptom
You have configured Custom Identity Provider for Platform Users as per Establish Trust and Federation of Custom Identity Providers for Platform Users [Feature Set B] in Cloud Foundry (CF) subaccount with Feature Set B.
Now you want to delete all S-users from Default Identity Provider (SAP IDS). You were able to delete other S-user as long as there was one S-user with role collection "Subaccount Administrator".
However, when trying to delete the last S-user, it ends with the following error:
Failed to delete the user (400) - Please reference the correlation ID <xx> in the support ticket.
as following image:
When trying to remove role collection "Subaccount Administrator" from the last S-user, it fails with error:
The role collections have not been successfully updated.
as following image:
"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."
Read more...
Environment
- SAP Business Technology Platform Cloud Foundry - BTP CF
- Feature Set B
Product
Keywords
s user, suser, ids user, sap user, SAP-managed identity providers,sap.ldap, ias, identity authentication service, custom idp, failed to delete the user (400), role collections have not been successfully updated , KBA , BC-CP-CF-SEC-IAM , UAA, Authentication, Authorization, Trust Mgmnt , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.