SAP Knowledge Base Article - Preview

3769585 - OIDC ID token sub does not match UID in Customer Data Cloud

Symptom

  • In the OIDC ID token, the sub claim is an opaque value that does not match the user's CDC UID.
  • The sub value cannot be located outside the ID token, making user identification in relying party systems difficult.
  • Delays occur when processing backchannel logout, and users might be logged out unexpectedly.
  • No error messages or error codes are presented.


Read more...

Environment

  • Product: SAP Customer Data Cloud
  • Core REST API & Server SDKs (JWT / PHP / Java)

Product

SAP Customer Data Cloud all versions

Keywords

oidc, id token, sub, subject identifier, cdc uid, pairwise, public, relying party, backchannel logout, mapping, unique identifier, openid connect, rp-specific identifier, claim, token , KBA , CEC-PRO-API , Core REST API & Server SDKs (JWT / PHP / Java) , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.