- A Principal Propagation scenario with Kerberos between SAP BTP and an on-premise system via Cloud Connector is not working.
- In the Cloud Connector logs (ljs_trace), the following error is found:
#ERROR#com.sap.core.connectivity.protocol.http.handlers.HttpAuthenticationHandler#tunnel-client-21-1#0xc639dfa9#Unable to generate authorization token
com.sap.core.connectivity.spi.sso.BackendTokenGenerationException: Could not create SPNego token
Caused by: com.sap.security.krb5.exceptions.KrbException: Received KRB-ERR message: error code 13 [KDC_ERR_BADOPTION (KDC cannot accommodate requested option)]
- SAP Business Technology Platform, Neo environment
- SAP Cloud Connector
btp, scp, sap cp, scc, pp, user, login, sso , KBA , BC-NEO-SEC-IAM , Authentication, Authorization(Cloud Platform Neo) , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , Problem
About this pageThis is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).
Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.