SAP Knowledge Base Article - Public

3462061 - Error when adding subaccount of SAP Datasphere in SAP Cloud Connector

Symptom

Below error occurs when adding subaccount of SAP Datasphere in SAP Cloud Connector:

An authorization problem occurred when downloading the configuration. Check the spelling of the subaccount name, user, and password. See 'Log And Trace Files' and in particular ljs_trace.log for details.

And, in ljs_trace.log, below entries can be found:

Caused by: com.sap.scc.servlets.CriticalSccException: Preparation of tunnel certificate for xxx.com account failed due to unknown exception.
    at com.sap.scc.ui.SubaccountControl.applyConfig(SubaccountControl.java:225)
    at com.sap.scc.ui.SubaccountControl.createSubaccount(SubaccountControl.java:115)
    ... 40 common frames omitted
Caused by: com.sap.scc.servlets.SccHandshakeException: SCC handshake failed: 401 — Unauthorized
    at com.sap.scc.cert.HttpCertificateManagementService.processRequest(HttpCertificateManagementService.java:143)
    at com.sap.scc.cert.HttpCertificateManagementService.executePostRequest(HttpCertificateManagementService.java:120)
    at com.sap.scc.cert.HttpCertificateManagementService.signCertificateForSCC(HttpCertificateManagementService.java:79)
    at com.sap.scc.ui.SubaccountControl.applyConfig(SubaccountControl.java:187)
    ... 41 common frames omitted

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."

Environment

SAP DataSphere

Reproducing the Issue

  1. Click Add Subaccount button in SAP Cloud Connector.
  2. Input all the information of the Subaccount in SAP Datasphere.
  3. Click Save button.

Cause

The input user name or password is incorrect. 

Resolution

Make sure that the e-mail address is associated with an active S-User ID. To avoid login issues, the e-mail must be associated to 1 S-user ID only. To validate the password try to login to https://accounts.sap.com with the same credentials entered in the Cloud Connector. If the login fails, use the "Forgot Password" link in the logon page to reset the password.

    • The password from the SAP Universal ID is managed in a different URL (https://account.sap.com for SAP Universal ID) than the one mentioned above and this SAP Universal ID password does not work.
    • You must use the same password you use to access https://accounts.sap.com (in other words, the password of the specific S-User ID related to the email address).

      Note: Users created in the Technical Users application cannot be used in the Cloud Connector. Reason being these users are not stored in the SAP ID Service. They are only used in SAP Solution Manager's Support Hub Connectivity.
      In addition, it is not possible to use SAP Universal ID in the Cloud Connector yet. Log on with the password associated with your S-user account.

See Also

KBA 2571763 - Authorization problem in SAP Cloud Connector when adding Cloud Foundry subaccount

Keywords

SAP Data sphere, sub account not work, add subaccount , KBA , DS-DI-CON , Connections , Problem

Product

SAP Datasphere all versions