SAP Knowledge Base Article - Public

3619244 - [FIXED and RCA PROVIDED] Randomly occurring HTTP 401 unauthorized error in SAP Datasphere

Symptom

Some authentication error is randomly occurring with the error: {"status":401,"message":"HTTP 401 Unauthorized"}

Message when consuming DS data via live connection:
Unable to authenticate. Please ensure your credentials are valid.
Correlation ID: XXX
 
Message with relation SAC import jobs from DS odata with authentication:
The request is unauthorized, please check data service url and credentials.
Correlation ID: XXX
 
SAC Excel Addin connected to Datasphere sources: 
The data source *** is not available on the tenant and therefore can't be refreshed.
Mouse over red triangle icon message reveals authorization error: You can't use this data source, either because it doesn't exist anymore or because
you don't sufficient have authorization to use it. Please check with your system administrator.

Environment

SAP Datasphere

SAP Analytics Cloud

Resolution

Update on Jul 8: RCA Document is attached in this KBA.

Update on Jun 13 12:00pm UTC:
Support tickets were sent back for closure. This concludes the periodic status updates.
Root cause analysis will be performed and shared via this KBA. 
It may take some days until SAP Datasphere team provides this final RCA statement for impacted customers.
Therefore, follow this KBA for the final RCA statement. 

Update on Jun 13 10:20 CET:
The hotfix is now applied in all landscapes.

Update on Jun 12 22:55 UTC:
The hotfix is now applied in the majority of landscapes.
The issue looks mitigated and therefore SAP Datasphere consumption should be restored.

Update on Jun 12 18:55 UTC:
SAP Datasphere team is now applying a manual fix in each landscape.
After that, the authorization and trust management service is reestablished and 401 errors should no longer occur. 
Once the issue is mitigated, the team will proceed with proper RCA. 
A follow up update will be provided until UTC 23:00.

Update on Jun 12 16:30 UTC: 
Datasphere Development teams are working on reestablishing the service.
So far, no workaround was identified. 
Next update will be provided until Jun 12 19:00 UTC.

The solution of this issue is currently under investigation. 

Keywords

HTTP 401 unauthorized, SAP Datasphere, SAML bearer token, API call, random error, integration suite, postman, DSP tenant, odata request, message processing, add-in , KBA , DS-SEC-AUTZ , Authorizations (Locks, etc.) , Problem

Product

SAP Datasphere all versions