SAP Knowledge Base Article - Public

3760167 - Publication Failed with 'Unable to authenticate. Please ensure your credentials are valid' to BW/4HANA Using Basic Auth

Symptom

  • Live tunnel connection to BW/4HANA using basic authentication intermittently fails with “Unable to authenticate. Please ensure your credentials are valid.”
  • Published stories initially show no data; 
  • Creating or editing a live connection: first attempt fails with authentication error; clicking OK again succeeds and the connection is created/saved.
  • HAR/console traces show an initial 404 followed by 401 Unauthorized.
  • Publications based on tunnel connection fail with error eSE112.

Note: The solution provided in this KBA may also work with other on S/4HANA, BW, or other SAP product, but as of this publication, no other systems have been tested.



Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.

Environment

  • Product: SAP Analytics Cloud  2026.2.16 
  • BW/4HANA 

Reproducing the Issue

  1. Create a new live tunnel connection from SAP Analytics Cloud to BW/4HANA using basic authentication, enter user credentials, and click OK. Observe an authentication error.
  2. Click OK again. The authentication succeeds and the connection is created/saved.
  3. create a Model and a Story using this new connection. open the story and see the first load fails with the same authentication error; refreshing loads the data.
  4. Schedule a publication for this story. Observe failure with error eSE112.

Cause

  • Misconfiguration in SAP Cloud Connector: “System Certificate for Logon” enabled for the mapped BW system, causing intermittent authentication handshake failures (401) on live tunnel connections and publication failures (eSE112).

Resolution

  1. In SAP Cloud Connector, navigate to: Subaccount → Cloud to On-Premises → Access Control → Mapping Virtual to Internal System, edit the BW mapping, and uncheck “System Certificate for Logon.” Save the change.
  2. Test by editing the SAC live tunnel connection (re-enter password if prompted) and confirm authentication succeeds on the first attempt.
  3. Open a story based on the tunnel model and schedule a publication to confirm that the eSE112 error no longer occurs.

See Also

  • KBA 3579875 - Error "Unable to authenticate. Please ensure your credentials are valid" for live tunnel type connection to BW using basic authentication
  • KBA 3633206 - Publication fails with error eSE112 when scheduling from a story based on a tunnel connection to BW or S/4
  • KBA 2569847 - Where can you find SAC user assistance (help) to use, configure, and operate it more effectively?
  • KBA 2487011 - What information do I need to provide when opening a case for SAP Analytics Cloud?
  • KBA 2511489 - Troubleshooting performance issues in SAP Analytics Cloud
  • SAP Analytics Cloud Connection Guide
  • SAP Analytics Cloud Get More Help and SAP Support
  • Need More Help? Contact Support 

Your feedback is important to help us improve our knowledge base.

Keywords

sac, live data connection, tunnel, bw/4hana, basic authentication, unable to authenticate, 401, 404, eSE112, publication failure, cloud connector, system certificate for logon, ina service, story refresh, authentication error , KBA , LOD-ANA-LDC-HAN , SAC Live Data Connection HANA , Problem

Product

SAP Analytics Cloud all versions