SAP Knowledge Base Article - Public

3677629 - User creation using SCIM API fails with the error 400: user/group operation not completed due to invalid configuration in Sap Analytics Cloud (SAC ).

Symptom

User creation using SCIM API fails with the error 400: user/group operation not completed due to invalid configuration in SAC

Environment

SAP Analytic Cloud 

Reproducing the Issue

  1. Use the Endpoint /scim/Users | SAP Help Portal 

Notice: The User creation failed with status code: 400 and message "User/group operation not completed: Invalid SAML IdP Configuration"

Cause

The SAML is configured on the tenant. However, the value for "userName" used in the schema does not correspond with the User attribute.

For example, the SAML configuration in the tenant is using email as User attribute. However, the "userName": "XYZ" is used in the schema, causing the request to fail.

Resolution

If you are using SAML authentication, userName should be set to the property you are using for your SAML mapping. For example, the user's USER ID, EMAIL, or CUSTOM SAML MAPPING. If your SAML mapping is set to EMAIL, the email address you add to userName must match the email address you use for email.

To find this information, log on to SAP Analytics Cloud and go to  (Menu) --> (Security) --> (Users).

See Also

Keywords

sap analytics cloud, sac, api error, user creation error, error 400, invalid configuration, saml configuration, scim api, user/group operation, user management, provisioning, sac tenant, oauth client, sac user creation failure. , KBA , LOD-ANA-ADM , SAC Administration , Problem

Product

SAP Analytics Cloud 1.0