Symptom
- You would like to establish a connection between SAP Analytics Cloud (SAC) to SAP Business Technology Platform (BTP) and Identity Authentication Services (IAS) as Identity Provider.
- While following KBA 2518900 - How do I connect SAP Analytics Cloud (SAC) to SAP Business Technology Platform (BTP) Identity Authentication Services (IAS) Identity Provider? and configuration guide SAML SSO configuration in SAP Analytics Cloud (SAC... - SAP Community .
- On the 4th Step when trying to verify the SAML Mapping between your SAC tenant and IAS the verification fails with an exception - "we were not able to verify your account.Check your login credentials and try again.
Images and data taken from SAP internal systems and demo environments. Any similarity to production data is purely coincidental.
- In the Verification dialog when the URL is shown and you copy the url to an incognito window you are not prompted to login to SAP IAS but to a 3rd party Identity Access Management Solution, for example like Azure.
Using the URL - https://<tenanturl>.authentication.<landscape>.hana.ondemand.com/config?action=who (please specify your tenant url & landscape) you are also routed to the 3rd party authentication page instead of SAP IAS.
Environment
- SAP Analytics Cloud(Enterprise)
- SAP Identity Access Management
- Microsoft Azure (Entra ID)
Reproducing the Issue
- Try to verify the SAML Mapping for SAC as shared in guide SAML SSO configuration in SAP Analytics Cloud (SAC... - SAP Community.
- Access url - https://<tenanturl>.authentication.<landscape>.hana.ondemand.com/config?action=who (please fill in your own tenant & landscape details)
- Notice instead of SAP IAS login screen a 3rd party is shown.
Cause
- Conditional Authentication is configured for the SAC as an Application.
(Please note in the screenshot that the default here hasn't been changed, it's by default Identity Authentication.)
Resolution
- If another selection is present as the Default Identity Provider for SAC,please select Identity Authentication once more.
- Generate a new metadata.xml
- Repeat again SAC relevant steps shared in SAML SSO configuration in SAP Analytics Cloud (SAC... - SAP Community
- For more information about how Conditional Authentication can influence the authentication flow for applications please feel free to refer to the following help articles for SAP Cloud Identity Services:
See Also
- 3069559 - Support User Frequently Asked Questions (FAQs) in SAP Analytics Cloud (SAC) & SAP Digital Boardroom
- 2569847 - Where can you find SAC user assistance (help) to use, configure, and operate it more effectively?
- Have a question? Ask it here and let our amazing SAP community help! Or reply and share your knowledge!
- 2487011 - What information do I need to provide when opening an case for SAP Analytics Cloud?
- 2511489 - Troubleshooting performance issues in SAP Analytics Cloud
- Search for SAP Analytics Cloud content using your favorite search engine (such as SAP for Me, Google or Bing):
- https://me.sap.com/servicessupport/search#?q=SAP%20Analytics%20Cloud%20OR%20SAC&tab=All
- https://www.google.com/search?q=site%3Ahttps%3A%2F%2Fuserapps.support.sap.com+SAP+Analytics+Cloud
- https://www.bing.com/search?q=site%3Ahttps%3A%2F%2Fuserapps.support.sap.com+SAP+Analytics+Cloud
- Note: Add relevant text or warning/error messages to the text search field to filter results.
- SAP Analytics Cloud Connection Guide
- Getting Started with SAP Analytics Cloud Expert Community page
- SAP Analytics Cloud Get More Help and SAP Support
- Need More Help? Contact Support or visit the solution finder today!
Your feedback is important to help us improve our knowledge base.
Keywords
SAP Analytics Cloud, Identity Access Management, SAML, SAML Mapping,SSO,Azure , KBA , LOD-ANA-AUT , SAC Authentication / Login , Problem
Product
SAP Analytics Cloud 1.0
Attachments
| Pasted image.png |
SAP Knowledge Base Article - Public