SAP Knowledge Base Article - Preview

3544976 - Action in SAP Build Process Automation process fails: "Token header claim [kid] references unknown signing key : [default-jwt-key--<id>]"

Symptom

An Action is configured referencing a Destination with one of the following authentication types:

  • OAuth2UserTokenExchange

  • OAuth2JWTBearer

  • OAuth2SAMLBearerAssertion

  • SAMLAssertion

  • PrincipalPropagation

From the Action Editor, it works fine, but when running it from the process, it fails with the following message in the error logs:

Action '<id>' failed with the following error: 'Error thrown from action runtime library: Failed to execute action <action>: Failed to build headers. The destination tried to provide authorization tokens but failed in all cases. This is most likely due to misconfiguration. Original error messages: Retrieval of OAuthToken failed due to: Unable to fetch refresh token from the specified token service URL. Response was: Token header claim [kid] references unknown signing key : [default-jwt-key--<id>]'.


]""> Read more...

Environment

SAP Build Process Automation

Product

SAP Build Process Automation 1.0

Keywords

action, action editor, failed, sbpa, error thrown from action runtime library, failed to execute action, failed to build headers, the destination tried to provide authorization tokens, this is most likely due to misconfiguration, retrieval of oauthtoken failed, unable to fetch refresh token from the specified token service url, token header claim, references unknown signing key , KBA , BPI-PA , SAP Build Process Automation , BPI-PA-RT , SBPA Runtimes(Action RT, Mail RT, Destination-Auth,Mapping) , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.