Symptom
Microsoft Azure OpenID SSO fails in BI Launchpad with the below error:
"An error occurred, kindly retry.
If issue persists, please contact your administrator.
please close this window."
The APS logs hosting the Security Token Service (STS) contains below details:
Error returned from OAuth authorization server. [HTTP ResponseCode - 401]: {"error":"invalid_client","error_description":"AADSTS7000215: Invalid client secret provided. Ensure the secret being sent in the request is the client secret value, not the client secret ID, for a secret added to app '61e0f850-a3ee-496b-b4b1-2451c9d681d3'.
Environment
- SAP BusinessObjects Business Intelligence (BI) Platform 4.x / 2025
- OAuth 2.0 or OpenID using Microsoft
- Windows
Reproducing the Issue
- Configure a Microsoft Authorization server for OpenID workflow as per below:
From Legacy to Modern Auth: Enabling OpenID Connec... - SAP Community - Test the connection or generate a token.
- Observe the errors mentioned in the symptoms.
Cause
The OAuth token request being rejected by Azure due to incorrect client secret provided.
Resolution
- Create a new client secret and ID in Azure.
- Ensure to update the correct secret value and ID while performing the configuration in SAP BO.
- Generate the Token.
See Also
Keywords
Azure, OpenID, Client Secret, Generate token, OAuth, Fiori BI, BI Launchpad , KBA , BI-BIP-AUT , Authentication, ActiveDirectory, LDAP, SSO, Vintela , Problem
SAP Knowledge Base Article - Public