Symptom
Failed to create live connection to S/4HANA Cloud system in SAP Analytics Cloud (SAC) due to error:
- You are not authorized to query the remote system. Please ask your administrator to grant you the InA role.
Environment
- SAP Analytics Cloud (Enterprise)
- SAP S/4HANA Cloud
Reproducing the Issue
- Logon to SAC and create a new live S4HANA Cloud connection following guide:
https://help.sap.com/docs/SAP_ANALYTICS_CLOUD/00f68c2e08b941f081002fd3691d86a7/0485d540e0b340a0bc0da86fe368997c.html - Save the connection failed with error:
You are not authorized to query the remote system. Please ask your administrator to grant you the InA role. - Capture Har log and see the following error:
invalid_grant,
Provided authorization grant is invalid.Exception was There is no trust between entities and [Your SAC URL] in client XXX.For more information,
consult the kernel traces or the OAuth 2.0 trouble shooting SAP note 1688545
Cause
OAuth 2.0 SAML Issuer is not configured correctly for the communication system in S4HANA Cloud system.
Resolution
- Logon to S4HANA system and open the communication system created for SAC usage.
- Navigate to General > Identity Provider > Oauth 2.0 Identity Provider > confirm it's enabled.
- Confirm User ID mapping mode is set to User Name
- Change value of OAuth 2.0 SAML Issuer to the SAC tenant URL without https://
Normally this value should be fulfilled automatically after uploading Signing Certificate from SAC, in case the OAuth 2.0 SAML Issuer is not set correctly, this kind of error will happen.
Keywords
Bug, InA, S4HC, S4HANA C, connectivity, cannot, can't, fail , KBA , LOD-ANA-LDC-HAN , SAC Live Data Connection HANA , Problem
Product
SAP Analytics Cloud all versions