SAP Knowledge Base Article - Public

3702547 - Unable to authenticate when creating a live data connection in SAP Analytics Cloud Using Basic Authentication in a BW On-prem

Symptom

  • Authentication error encountered when attempting to create a live data connection in SAP Analytics Cloud.
  • Error message displayed: "Unable to authenticate. Please ensure your credentials are valid. Correlation ID: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXX".
  • Username and password authentication was used instead of SAML.

Environment

SAP Analytics Cloud 2025.21.9  

Reproducing the Issue

  1. Attempt to create a live data connection in SAP Analytics Cloud using username and password authentication.
  2. Observe the error message: "Unable to authenticate. Please ensure your credentials are valid. Correlation ID: XXXXXXXXXXXXXXX".

Cause

  • The BW system was configured to prioritize or force SAML authentication for the InA service, leading to an HTTP 302 Redirect to the SAML login page.
  • The browser blocked the redirect due to CORS policy restrictions, preventing successful authentication.

Resolution

Note: The following steps were developed with the BW system in mind; however, they may also apply to other on-premise systems (e.g., SAP HANA and SAP S/4HANA).

  1. Adjust SICF Logon Procedures:
    1. Open transaction SICF in the BW system.
    2. Navigate to /default_host/sap/bw/ina/.
    3. Double-click the InA node and repeat these steps for the GetServerInfo sub-node.
    4. Go to the Logon Data tab.
    5. Change the Logon Procedure to "Alternative Logon Procedure".
    6. Ensure "Basic Authentication" is moved to the top of the Logon Procedure List.
    7. Move "SAML Authentication" down or remove it if not intended for this connection.
    8. Check the box "Use All Logon Procedures".
    9. Save and activate the service.

  2. Verify InA Service Status:
    1. Ensure the following sub-services under /sap/bw/ina/ are active:
    2. GetServerInfo
    3. GetResponse
    4. GetCatalog
    5. BatchProcessing
  3. Configure CORS Whitelist:
    1. Whitelist the SAC tenant URL in the BW system using transaction UCONCOCKPIT or rewrite rules to allow cross-origin requests.

  4. Test the connection again in SAP Analytics Cloud.

See Also

Your feedback is important to help us improve our knowledge base.

Keywords

authentication error, live data connection, sap analytics cloud, username and password, correlation id, unable to authenticate, BW system, SICF logon procedure, basic authentication, SAML authentication, CORS policy, HTTP 302 redirect, SAC tenant URL, InA service , KBA , LOD-ANA-LDC-HAN , SAC Live Data Connection HANA , Problem

Product

SAP Analytics Cloud all versions