3440265 - Cloud Data Integration (CDI) connection between SAC and Datasphere fails due "internal error" for Remote Tables

When validating a CDI (Cloud Data Integration) connection in SAP Datasphere, connection is valid but Remote Tables fail due error:

• Remote Tables: internal error: Cannot get remote source objects: Could not get tables, Code: 403, SQL State: HY000

Therefore, connection between SAC (SAP Analytics Cloud) cannot be established using SAC's API as source of SAP Datasphere.

SAP Datasphere

SAP Analytics Cloud

Validate a Cloud Data Integration connection after entering SAC's API as URL (e.g. https://sac-tenant.us10.sapanalytics.cloud/api/v1/dataexport/administration/) in Connection setting of SAP Datasphere

Proxy blocks DPAgent to access/reach SAC's API endpoints. Network issue in the client machine where DPAgent was installed.

Error are found in DPAgent's framework.trc log:

[5313]{231246}[258/0]<> 2000-00-00 00:00:00.000000 e DPAdapterManager AdapterManager.cpp(04549) : ::sendMessage: Invalid odata connection! Getting odata metadata failed because of org.apache.olingo.client.core.http.OAuth2Exception: Failed to fetch OAuth2 token! Connection reset
[5313]{231246}[258/0]<> 2000-00-00 00:00:00.000000 e FedTrace         DPAdapterAccess.cpp(02466) : DPAdapterAccess::BrowseMetadata: failed with error: Invalid odata connection! Getting odata metadata failed because of org.apache.olingo.client.core.http.OAuth2Exception: Failed to fetch OAuth2 token! Connection reset

The DPAgent's machine must be able to access/reach the OAuth related endpoints!

1. Discover the IP Address for the API URL (e.g. https://sac-tenant.eu10.sapanalytics.cloud/api/v1/dataexport/administration/)
2. Discover the IP Address for the Token endpoint (e.g https://sac-tenant.authentication.eu10.hana.ondemand.com/oauth/token)
3. In case of SSO, it may redirect to another IP Address 
4. The DPAgent connection to the discovered IP addresses above needs to be open, and the port is the standard HTTPS port (443) in each case.
5. Test the connection from the agent's machine to the URLs, such as "curl https://sac-tenant.authentication.en10.hana.ondemand.com/oauth/token"

KBA , DS-DI-CON , Connections , HAN-DP-SDI-DS , SAP Datasphere specific SDI issues , Known Error

SAP Analytics Cloud all versions ; SAP Datasphere all versions