3537724 - Request failed with status code 401 - unauthorized - Unable to map issuer

Symptom

Trust and federation between SAP Authorization and Trust Management Service (XSUAA) and SAP Cloud Identity Services has been setup. However the access fails with the below error:

*********************************

GET request completed with status 500 Could not authenticate with ias: Could not obtain access token:
Failed to exchange token: Request failed with status code 401 - unauthorized - Unable to map issuer
Request failed with status code 401 - unauthorized - Unable to map issuer

*********************************

Environment

SAP Business Technology Platform (SAP BTP. URL: https://cockpit.btp.cloud.sap)
SAP Cloud Identity Services
SAP Authorization and Trust Management Service (XSUAA)
Cloud Foundry (CF)

Product

SAP BTP, Cloud Foundry runtime and environment all versions ; SAP Business Application Studio all versions ; SAP Business Technology Platform all versions ; SAP Cloud Identity Services all versions ; SAP Identity Management all versions ; SAP Integration Suite all versions

Keywords

SAP Cloud Identity Services, SAP BTP Subaccount, token exchange, authentication issue, issuer mismatch, trust configuration, command line interface, 500 error, status code 401. , KBA , BC-CP-CF-SEC-IAM , UAA, Authentication, Authorization, Trust Mgmnt , BC-IAM-IDS , Identity Authentication Service , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.