3297868 - Authentication Provider Cannot Be Accessed Error in IAS During Password Migration

Error Message “Authentication Provider cannot be accessed. Please check the authentication provider configurations and try again” when testing connection of authentication provider in IAS, while performing password migration process for IAS. 

• SAP SuccessFactors HCM Suite
• SAP Cloud Identity Services – Identity Authentication IAS
• SAP Cloud Identity Services – Identity Provisioning IPS

1. In IAS tenant go to Identity providers
2. Then Authentication Providers
3. Click on the Test Connection button
4. Fails with error “Authentication Provider cannot be accessed. Please check the authentication provider configurations and try again”. 

• Incorrect configuration.
• SuccessFactors IP allow listing.

Incorrect configuration:

1. If using the basic authentication type, ensure that the “Password Validation URL” in the authentication provider (IAS > Identity Providers > Authentication Providers) is taken from SAP SuccessFactors Data Centers Mapping to Authentication URL taking the data center into consideration. Note: The URLs used should have the full format ending with validateUser regardless of data center e.g., https://api55preview.sapsf.eu/odata/v2/restricted/validateUser)
2. If using the x509 authentication type, please ensure that the URL in the properties section of the source system in IPS has the same URL format as basic authentication type but with .cert added directly after the subdomain e.g., https://api55preview.cert.sapsf.eu/odata/v2/restricted/validateUser.

For CPS: Check internal notes for further guidance on troubleshooting.

• 2950998 - How to migrate User Passwords from SAP SuccessFactors to Identity Authentication - SAP for Me
• 2791410 - Integrating SuccessFactors with Identity Authentication through the Upgrade Center

Authentication Provider cannot be accessed. Please check the authentication provider configurations and try again, Authentication Provider cannot be accessed, Please check the authentication provider configurations and try again, IAS, Identity Authentication Service, authentication provider test connection, identity providers IAS, authentication providers IAS, connection test failed IAS, password validation URL, SAP SuccessFactors authentication URL, incorrect configuration IAS, IPS source system configuration, identity provisioning service IPS, x509 authentication IAS, basic authentication IAS, SuccessFactors allow listing, API URL configuration IAS, authentication provider configuration error, certificate authentication .cert URL  , KBA , LOD-SF-PLT-IAS , Identity Authentication Services (IAS) With BizX , Problem