SAP Knowledge Base Article - Preview

3802366 - Application OIDC 401 Unauthorized - AADSTS7000222: The provided client secret keys for app '<Microsoft App ID>' are expired

Symptom

  • Corporate Identity Provider and SAP Cloud Identity Services (IAS) proxy authentication failed with the following error:

    OpenID provider cannot process the request because the configuration is incorrect. Please contact your system administrator.
    TroubleshootingYou can provide the following correlation ID to your administrator: <Correlation ID>


  • In the IAS Troubleshooting Log, following error can be seen:

    401 Unauthorized: '{'error':'invalid_client','error_description':'AADSTS7000222: The provided client secret keys for app '<Microsoft App ID>' are expired. Visit the Azure portal to create new keys for your app: https://aka.ms/NewClientSecret, or consider using certificate credentials for added security: https://aka.ms/certCreds. 


Read more...

Environment

  • SAP Cloud Identity Services as proxy
  • Microsoft Azure / Entra ID as corporate identity provider

Product

Identity Authentication 1.0

Keywords

OIDC, login, authentication, Microsoft, Azure, Entra ID,  , KBA , BC-IAM-OID , OIDC/OAUTH2 component in SAP Cloud Identity Services , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.