3296489 - 'Password for user <USER> has to be changed before login' error in trace log of SAP Cloud Integration

When calling the SAP Cloud Integration (inbound), the sender receives an HTTP 401 error, for e.g:

• Message failing 401 unauthorized Wrong Content Content-Type and empty HTTP-Body received
• SRT: Wrong Content-Type and empty HTTP-Body received: ("HTTP Code 401  : ")

The root cause of the error can be checked in HTTP Traces and LJS/Trace log of SAP Cloud Integration. The HTTP Logs results in 401, for eg:

• 10.81.272.12 (185.225.192.66) - - [29/Dec/2022:03:44:07 +0000] POST /cxf/<Endpoint Path> ?MessageId= <Message ID> ualityOfService=ExactlyOnce HTTP/1.1 401 

When checking the same timestamp (29/Dec/2022:03:44:07) in LJS/Trace log files, the following root cause appears:

• 03:44:07#+00#ERROR#com.sap.security.um.provider.trust.internal.HttpUtil##anonymous#https-jsse-nio-8241-exec-31###<ID>#1#Request for BASIC authentication failed with response code 401 by: [<IAS Account>.accounts.ondemand.com], due to: [PASSWORD_CHANGE_REQUIRED].|
         
• 2022 12 29 03:44:07#+00#ERROR#com.sap.security.auth.module.basic.PasswordLoginModule##anonymous#https-jsse-nio-8241-exec-31###<ID>#1#Password for user <USER> has to be changed before login.|

For further details regarding how to check the HTTP and LJS/Trace logs in SAP Cloud Integration:

• Troubleshooting HTTP errors in SAP Cloud Integration (Inbound)

• SAP Integration Suite
• SAP Business Technology Platform
• Cloud Integration

Cloud Integration, SAP Integration Suite, SAP Cloud Platform Integration, Cloud Platform Integration, SAP CPI, CPI, SCPI, HANA Cloud Integration, HCI, SAP HCI, tenant, iFlow, Integration Flow, 401, ECC, S4, Hana, Abap, On, premise, Password, user, inbound , KBA , LOD-HCI-PI-OPS , Cloud Operations , Problem