SAP Knowledge Base Article - Public

3658224 - Discrepancy in OAuth2SAML Audience Value in SAP Analytics Cloud

Symptom

The OAuth2SAML Audience value in the SAC environment displays "xxx.aws-live" instead of the expected URL format "https://xxx.com".

Environment

SAC Analytics Cloud 2025.14.12 

Reproducing the Issue

  1. Log into SAC;
  2. Navigate to Administration > App Integration > OAuthSAML 2 Audience.
    1. Observe that the OAuthSAML Audience value is displayed as "xxx.aws-live" instead of the expected URL format.

Cause

Older tenants use the non-HTTP format, while newer tenants (created after 2019) use the HTTP format. This change was required and implemented a few years ago. The SAML provider and entityID do not follow the standard XSUAA pattern, as they use “xxx.aws-live.” For older tenants, it is expected that the entityID pattern in the XSUAA metadata may differ, and this behavior is considered normal.

Resolution

This behavior is expected.

See Also

Your feedback is important to help us improve our knowledge base.

Keywords

OAuth2 SAML audience, sap analytics cloud, saml provider, entityid format, tenant configuration, expected behavior, http format , KBA , LOD-ANA-ADM , SAC Administration , Problem

Product

SAP Analytics Cloud all versions