3651142 - Users are prompted to log in again when accessing s/4hana public cloud after IAS login

• Users are prompted to log in again when accessing S/4HANA Public Cloud after IAS login, despite already being authenticated via IAS.
• Expected behavior: Once a user is authenticated through IAS, the system should directly allow access to the S/4HANA Public Cloud tenant without asking for login credentials again.
• Actual behavior: Users are prompted to re-enter login credentials when trying to access the S/4HANA Public Cloud tenant.

Identity Authentication Service

1. Log in to IAS with valid user credentials.
2. After successful IAS login, open the S/4HANA Public Cloud customizing/development tenant.
3. Observe that the system prompts the user to sign in again with credentials instead of allowing seamless SSO login.

From the logging page in SAP S/4HANA Cloud Public Edition, the application is calling IAS as https://<IAS_Tenant>accounts.cloud.sap, which leads to another login page.
The domains ondemand.com and cloud.sap do not share the same session.

1. Ensure that the IAS login domain matches the domain used by the S/4HANA Public Cloud tenant.
2. Log in to IAS using the domain format https://<IAS_Tenant>.accounts.cloud.sap/admin.
3. Access the S/4HANA Public Cloud after logging in to IAS.
4. Verify that the system does not prompt for additional login credentials.

• KBA 2461862 - Collecting SAML traces with Chrome, Edge or Firefox.
• KBA 2942816 - How to export and self-analyze troubleshooting logs from Identity Authentication.

single sign-on, sso, identity authentication service, ias, sap s/4hana cloud, ondemand.com, cloud.sap, login prompt, authentication issue, session sharing, seamless login, s4hana tenant, troubleshooting logs, saml traces, integration tools, extensibility , KBA , BC-IAM-IDS , Identity Authentication Service , Problem