SAP Knowledge Base Article - Public

3721407 - Unable to add SAC subaccount in Cloud Connector - SAP Analytics Cloud(SAC)

Symptom

In the Cloud Connector  ljs_trace.log : 

Caused by: com.sap.scc.servlets.CriticalSccException: Preparation of tunnel certificate for 6c175d6a-bf38-4e25-9db1-0b5b5972b71b@cf.sa30.hana.ondemand.com account failed due to unknown exception.
    at com.sap.scc.ui.SubaccountControl.applyConfig(SubaccountControl.java:225)
    at com.sap.scc.ui.SubaccountControl.createSubaccount(SubaccountControl.java:115)
    ... 50 common frames omitted
Caused by: com.sap.scc.servlets.SccHandshakeException: SCC handshake failed: 401 — Unauthorized

And 400 errors:
com.sap.core.connectivity.tunnel.core.handshake.TunnelHandshakeException: Invalid status of handshake response: 400 Bad Request    at com.sap.core.connectivity.tunnel.client.handshake.ClientProtocolHandshaker.finishHandshake(ClientProtocolHandshaker.java:178

Environment

  • SAP Cloud Connector 2.10.2 or higher
  • SAP BTP Cloud Foundry environment
  • SAP Analytics Cloud

Reproducing the Issue

  1. Log on to your instance of SAP Cloud Connector.
  2. On the Connector page, choose Add Subaccount
  3. Enter the region, Subaccount, Location ID, and Login email and password
  4. Save your changes.

Notice : Error 'An authorization problem occurred when downloading the configuration. Check the spelling of the subaccount name, user, and password. See 'Log And Trace Files' and in particular ljs_trace.log for details'.

Cause

The email ID used is linked to multiple user IDs in the SAP BTP environment. The SAP BTP/SCC connectivity layer is designed to support only a one-to-one mapping between email addresses and user identifiers, and therefore rejects the handshake attempt during subaccount configuration

Resolution

Create a new SAP BTP user with a unique email address and dedicated user ID.

See Also

Keywords

sap cloud connector, cloud foundry subaccount, sap analytics cloud, authorization issue, handshake error, 401 unauthorized, 400 bad request, tunnel handshake exception, subaccount configuration, email mapping issue, sap btp user, unique email address, user identifier, connectivity layer, sap btp environment, sap analytics cloud subaccount , KBA , LOD-ANA-AQU , Import Data Connections (Acquiring Data) , Problem

Product

SAP Analytics Cloud 1.0