SAP Knowledge Base Article - Public

3824282 - Authorization Missing for BusinessUserSimpleByElementsQuery_sync When Running an IPS Synchronization Job

Symptom

The authorization errors when executing a synchronization job in Identity Provisioning Service (IPS). The following error messages appear in the job logs:

  • Cannot execute provisioning job in tenant context Caused by.
  • Error during execution on behalf of tenant with ID Caused by.
  • Can not read entities from source system.
  • Caused by: org.apache.cxf.binding.soap.SoapFault: Authorization missing for service "http://sap.com/xi/ABA" QueryBusinessUserln, operation "BusinessUserSimpleByElementsQuery_sync"; more details in the web service error log on provider side.

Environment

SAP S/4HANA Cloud Public Edition

Cause

  • The error message generally indicates that the communication user configured for the connection is incorrect or that the password is incorrect.
  • The communication user used in IPS must be the user configured in the target SAP S/4HANA Cloud system and associated with the relevant communication scenario.
  • Incorrect communication user credentials can prevent IPS from accessing the Business User data through the SOAP service.

Resolution

 Follow all the configuration steps outlined in the below SAP Help Portal documentation, complete the required configurations, and then re-run the synchronization job to check whether the issue is resolved. 

Keywords

embedded sac, sac unreachable, profile not configured, no active account, ips sync, identity provisioning, ias, communication arrangement, sap_com_0193, authorization missing for service, QueryBusinessUserIn, BusinessUserSimpleByElementsQuery_sync, embedded analytics, custom report, s/4hana cloud public edition , KBA , CA-GTF-BUM , Business User Management , BC-IAM-IDM , Identity Management , Problem

Product

SAP S/4HANA Cloud Public Edition all versions