Symptom
After enabling the provisioning of platform users and user role assignments to and from Cloud Foundry environment, the following error is encountered:
Cannot execute provisioning job in tenant context:
Caused by: Error during execution on behalf of tenant with ID:
Caused by: Can not read entities from source system:
Caused by: Connector cannot process more entities due to irreparable error
Caused by: Oauth request failed with status: 400 and body: {"error":"invalid_scope","error_description":"[scim.write, scim.read] is invalid. This user is not allowed any of the requested scopes"}, destination:…
Read more...
Environment
- Identity Provisioning
- Identity Authentication
Product
Keywords
Platform Members, Cloud Foundry, CF, 400, Oauth request failed, groups, scim.write, scim.read, user is not allowed , KBA , BC-IAM-IPS , Identity Provisioning Service (IPS) , BC-IAM-IDS , Identity Authentication Service , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.
SAP Knowledge Base Article - Preview