3807566 - Error 403 "Not Authorized" When Accessing OPF Workbench in SAP Commerce Cloud

Symptom

When navigating to the OPF Workbench (/opf-workbench), the page displays:

Error 403

Looks like you are not authorized to enter this page. Please contact your administrator.

The user is already authenticated but cannot access the Workbench UI.

While in the backend system log [*1], the request is rejected with an error similar to:

Token rejected [reason: JWT (claims->{ ... }) rejected due to invalid claims or other invalid content. Additional details: [[*2] The token does not contain a group matching the current global tenant id or a global group, and the request is not anonymous]]

The JWT itself is valid (properly signed, not expired), but the authorization check fails.

*1 - Please consult to the SAP Support

*2 - Refers to the CCv2 JWT validation rule for tenant group membership

Environment

SAP Commerce Cloud with Open Payment Framework

Product

SAP Commerce Cloud all versions

Keywords

OPF, Open Payment Framework, OPF workbench , KBA , CEC-SCC-ADD-OPF , Open Payment Framework , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.