SAP Knowledge Base Article - Preview

3730800 - PKIX path building failed: unable to find valid certification path when calling SAP BTP authentication endpoint (OAuth token request)

Symptom

  • When calling the SAP BTP OAuth token endpoint " https://<subdomain>.authentication.<region>.hana.ondemand.com/oauth/token" from a third-party system. The request fails with an error: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException:unable to find valid certification path to requested target
  • This issue occurs during OAuth2 token generation using the client credentials grant.
  • The same endpoint works successfully when tested using tools such as Postman, but fails when invoked from the third-party system.


Read more...

Environment

  • SAP Business Technology Platform

Product

SAP Business Technology Platform all versions

Keywords

PKIX path building failed, unable to find valid certification path to requested target, TLS trust, SSL handshake, certificate chain, root certificate, trust store, keystore, DigiCert G5, OAuth2, client_credentials, UAA, token endpoint, x509, Java cacerts , KBA , BC-CP-CF-SEC-IAM , UAA, Authentication, Authorization, Trust Mgmnt , BC-CP-CF-ROUTING , Cloud Foundry Runtime Ingress Routing Stack , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.