SAP Knowledge Base Article - Preview

3539401 - Request failed with status code 401 - invalid_token - Some parties were not in the token audience

Symptom

Trust and federation between SAP Authorization and Trust Management Service (XSUAA) and SAP Cloud Identity Services has been setup. However the access fails with the below error:

*********************************
completed with status 500 Could not authenticate with ias:Could not obtain access token: Failed to exchange token:
Request failed with status code 401 - invalid_token - Some parties were not in the token audience:
<<token audience>>, token details - {\"expiration\":<<expiration>>}
....
*********************************


Read more...

Environment

  • SAP Business Technology Platform (SAP BTP. URL: https://cockpit.btp.cloud.sap) 
  • SAP Cloud Identity Services
  • SAP Authorization and Trust Management Service (XSUAA)
  • Cloud Foundry (CF)

Product

SAP BTP, Cloud Foundry runtime and environment all versions ; SAP Business Technology Platform all versions ; SAP Cloud Identity Services all versions

Keywords

KBA , BC-CP-CF-SEC-IAM , UAA, Authentication, Authorization, Trust Mgmnt , BC-IAM-IDS , Identity Authentication Service , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.