3618707 - Access Denied when Logging in via SSO in SAP Commerce Cloud 2211.38

In SAP Commerce Cloud 2211.38, some users authenticated via Single Sign-On (SSO) were unable to access the Backoffice or Administration Console. Even though SSO authentication succeeded, the system returned an "Access Denied" error without logging any exception. The problem happened when the user did not have an encoded password set, although the existence of a password should have been irrelevant for SSO access.

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."

SAP Commerce Cloud 2211.38

SSO, Access Denied, Single Sign-On, Backoffice login, commerce, 2211.38, 2211.39, login.token.extended, user, login, issue, encoded, password, token-based authentication, failure, CCv2, hybris , KBA , CEC-SCC-PLA-PL , Platform , Problem