3578151 - Invalid Grant Error During SSO Login to SAP S/4HANA Using SAML 2.0 Bearer Assertion Flow for OAuth 2.0

• An error occurs when attempting to authenticate to a service on an S/4 Hana system using oauth using SAML bearer Assertion flow authentication
• Traces reveal the error message displayed : "invalid_grant", "Provided authorization grant is invalid. Exception was Attribute 'Recipient' of element 'SubjectConfirmationData' is invalid. For more information, consult the kernel traces or the OAuth 2.0 trouble shooting SAP note 1688545"
• the SAML assertion is not accepted by the token endpoint, because the recipient in SAML assertion does not match the called token endpoint URL. Token endpoint URL must be identical to the recipient in the SAML assertion.

• SAP S/4Hana
• SAP Netweaver 

SAP S/4HANA, SSO, Azure token, invalid grant error, OAuth 2.0, SAML bearer token authentication, Postman test , KBA , BC-SEC-LGN-OA2 , OAuth 2.0 for ABAP , Problem