Symptom
- Corporate Identity Provider and SAP Cloud Identity Services (IAS) proxy authentication failed with the following error:
OpenID provider cannot process the request because the configuration is incorrect. Please contact your system administrator.
TroubleshootingYou can provide the following correlation ID to your administrator: <Correlation ID> - In the IAS Troubleshooting Log, following error can be seen:
401 Unauthorized: '{'error':'invalid_client','error_description':'AADSTS7000222: The provided client secret keys for app '<Microsoft App ID>' are expired. Visit the Azure portal to create new keys for your app: https://aka.ms/NewClientSecret, or consider using certificate credentials for added security: https://aka.ms/certCreds.
Read more...
Environment
- SAP Cloud Identity Services as proxy
- Microsoft Azure / Entra ID as corporate identity provider
Product
Identity Authentication 1.0
Keywords
OIDC, login, authentication, Microsoft, Azure, Entra ID, , KBA , BC-IAM-OID , OIDC/OAUTH2 component in SAP Cloud Identity Services , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.
SAP Knowledge Base Article - Preview