SAP Knowledge Base Article - Public

2780306 - Fail to verify the account with the custom identity provider in SAP Analytics Cloud (SAC)

Symptom

The following error occurs when you logon into SAP Analytics Cloud (SAC) with a custom identity provider (IDP):

  • Login Error.
  • Fail to login to SAP Analytics Cloud.
  • Login Error - Fail to login to SAP Analytics Cloud.

In Chrome developer tools, the following error occurs:

  • HTTP 422 error
  • In the response from the IDP to SAC, the assertion below appears as
    <AudienceRestriction>
    <Audience>1234567</Audience>
    </AudienceRestriction>

Environment

  • SAP Analytics Cloud

Reproducing the Issue

  1. Configure custom IDP for SAC.
  2. Input anything instead of the hostname of SAC in the Audience URL in IDP.
  3. Do the verification in SAC. 

Cause

  • The audience URL is set to SAC's system URL.
  • Only certain IDPs (such as OKTA) require setting this value manually.
  • Some IDPs will set this value automatically after importing the SAC metadata file.

Resolution

Set the Audience URL to the SAC system URL in the custom IDP manually.

See Also

Your feedback is important to help us improve our knowledge base.

Keywords

SAP Cloud for Planning, sc4p, c4p, cforp, cloudforplanning, EPM-ODS, Cloud for Analytics, Cloud4Analytics, CloudforAnalytics, Cloud 4 Planning, BOC, SAPBusinessObjectsCloud, BusinessObjectsCloud, BOBJcloud, BOCloud., SAC, SAP AC, Cloud-Analytics, CloudAnalytics, SAPCloudAnalytics, SAML, SP, Service Provider, 500, 404, HTTP, context , KBA , saml2:audience sac okta , LOD-ANA , SAP Analytics Cloud (SAC) , LOD-ANA-BI , Business Intelligence Functionality, Analytic Models , LOD-ANA-PL , Planning , LOD-ANA-BR , SAC Boardroom , LOD-ANA-PR , SAC Predicitive , Problem

Product

SAP Analytics Cloud 1.0