SAP Knowledge Base Article - Preview

3832652 - Provisioning of platform users and user role assignments to and from Cloud Foundry environment fails with OAuth request failed with status: 400 and body

Symptom

After enabling the provisioning of platform users and user role assignments to and from Cloud Foundry environment, the following error is encountered:

Cannot execute provisioning job in tenant context: 
Caused by: Error during execution on behalf of tenant with ID: 
Caused by: Can not read entities from source system: 
Caused by: Connector cannot process more entities due to irreparable error 
Caused by: Oauth request failed with status: 400 and body: {"error":"invalid_scope","error_description":"[scim.write, scim.read] is invalid. This user is not allowed any of the requested scopes"}, destination:…


Read more...

Environment

  • Identity Provisioning
  • Identity Authentication

Product

Identity Provisioning 1.0

Keywords

Platform Members, Cloud Foundry, CF, 400, Oauth request failed, groups, scim.write, scim.read, user is not allowed , KBA , BC-IAM-IPS , Identity Provisioning Service (IPS) , BC-IAM-IDS , Identity Authentication Service , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.