3567349 - Master KBA for Authentication Issues with Embedded SAC in Sales and Service Cloud V2

You are facing Authentication issues during configuration of Embedded SAC for SAP Sales and Service Cloud V2.

• SAP Sales Cloud and SAP Service Cloud Version 2
• Embedded Usage of SAP Analytics Cloud

1. Blank screen when creating new story.
   1. Ensure the configuration is complete as per blog: https://community.sap.com/t5/crm-and-cx-blogs-by-sap/configuring-embedded-sac-in-sap-sales-and-sap-service-cloud-version-2/ba-p/13733376
2. Authentication pop-ups not triggered.
   1. You need to enable pop-ups in your browser or allow for [*.]cloud.sap sites.
3. Authentication is not working for any user.
   1. Issue 1: https://help.sap.com/docs/CX_NG_SVC/56436b4e8fa84dc8b4408c7795a012c4/319683f2e2b24f8a94eda0fbe9f74271.html
4. Specific user is not found in Embedded SAC.
   1. SAC is case sensitive and so the Subject Name Identifier passed by the IdP must match exactly what is maintained for the same user under Business User setting in V2 tenant (3374824 - eSAC Authentication Error: It seems that you don't have an active account https://me.sap.com/notes/3374824) 
5. Specific user is not found in BTP.
   1. BTP will only accept an email address even if USER_NAME is selected in the SSO configuration for V2. V2 settings can remain the same but IdP should be updated to pass the users email address instead.
6. The user account is inactive for the new user created after IdP upload.
   1. Issue 2: https://help.sap.com/docs/CX_NG_SVC/56436b4e8fa84dc8b4408c7795a012c4/319683f2e2b24f8a94eda0fbe9f74271.html
7. Authentication is not working in Microsoft Edge browser.
   1. Issue 5: https://help.sap.com/docs/CX_NG_SVC/56436b4e8fa84dc8b4408c7795a012c4/319683f2e2b24f8a94eda0fbe9f74271.html
8. No domains found after authentication seems complete.
   1. Transformation/function is applied to users Subject Name Identifier in IdP for the BTP authentication. Modify the email value so that it is passed exactly as per maintained in Business User setting in V2 (3542708 - Error No domains found in eSAC https://me.sap.com/notes/3542708)
9. Wrong value passed by the IdP when analyzing SAML trace.
   1. Verify the Subject Name Identifier attribute is set correctly and the value for the users attribute contains the expected value in the IdP.
10. Correct value passed by IdP but user is still not found.
    1. Do a dummy change to the First Name of the Employee record in the V2 Settings (3538058 - How to trigger Automatic Replication of a user to SAC in SAP Sales and Service Cloud V2 https://me.sap.com/notes/3538058)
11. Pop-Up flashing during SSO authentication for Embedded SAC.
    1. Add SAP domains in browser setting for third-party cookies (3570814 - Pop-Up flashing during SSO authentication for Embedded SAC https://me.sap.com/notes/3570814)

3515450 - FAQs for eSAC in SAP Sales and Service Cloud V2 https://me.sap.com/notes/3515450

3507765 - Analyzing SAML traces for eSAC authentication issues (V2) https://me.sap.com/notes/3507765

SAC, eSAC, SSO, auth, login, missing, config, ANA, integration , KBA , CEC-CRM-ANA , Analytics for SAP Sales/Service Cloud , LOD-ANA-OEM , Embedded usage of SAP Analytics Cloud , Problem

SAP Analytics Cloud all versions ; SAP Sales Cloud and SAP Service Cloud Version 2 all versions