SAP Knowledge Base Article - Public

3651914 - Authentication method change from "SAML Single Sign On" to "OAuth 2.0 with PKCE" in direct SAP Datasphere live connection in SAP Analytics Cloud

Symptom

A recent change was observed in the SAP Analytics Cloud (SAC) direct live connection to SAP Datasphere, where the authentication method shifted from SAML Single Sign On to OAuth 2.0 with PKCE (Proof Key for Code Exchange).

Environment

  • SAP Analytics Cloud
  • SAP Datasphere

Reproducing the Issue

  1. Logon to SAC
  2. Create or edit an SAP Datasphere live data connection.
  3. Observe that the authentication method defaults to OAuth 2.0 with PKCE instead of SAML Single Sign On.

Resolution

  • Direct live data connections to SAP Datasphere are impacted by Chrome's deprecation of third-party cookies.
  • "OAuth with PKCE" authentication method was used in direct live connection to SAP Datasphre in SAC since 2024 Q4.
  • For reference, see here. 

Keywords

sap analytics cloud, sac, oauth 2.0, pkce, authentication, saml, live data connection, chrome third-party cookies, deprecation, oauth with pkce flow, sap cloud application, authentication method change, sap live connection, third-party cookies impact , KBA , LOD-ANA-LDC-SCA , SCA - SAP Cloud Application , Problem

Product

SAP Analytics Cloud all versions