SAP Knowledge Base Article - Preview

2648112 - Mobile Services Build Error: Local Store provision fails when Principal Propagation is used

Symptom

Two separate authentication types are used, basic authentication and principal propagation.
The offline functionality works if only basic authentication is used, however when principal propagation is picked offline operations can't be completed successfully.

Offline operations fail against the local store when principal propagation is selected as authentication method.

The following error can be seen in SCPms service logs:

Failed to start the app: Failed to provision the local store: [-10210] The operation failed due to an error on the server: -857 (SERVER_SYNCHRONIZATION_ERROR) ([-10225] Message: User exception: [-100025] An error occurred while communicating with the OData server to retrieve the result of request "https://flpnwc-xxxxxx.dispatcher.hana.ondemand.com:443/sap/fiori/xxxxxx/sap/opu/odata/sap/XXY_ZYY_SRV/$metadata".Error caused by : [-100010] Retrieve metadata failed because the OData server returned HTTP Code, 401, with message null) Denied principal propagation to zxy-xy-sap-db.de:44343 due to invalid token for account:///xxxxxxx

In the SAP Cloud Connector logs the following entry can be seen:

#DEBUG#com.sap.core.connectivity.tunnel.client.sso.SSOClientProcessor#tunnel-client-45-2#0xef82b372#SSO token validation failed. com.sap.core.connectivity.tunnel.client.sso.InvalidSSOTokenException: The account/application/type services/dispatcher/JAVA is not trusted for principal propagation!


Read more...

Environment

  • SAP Mobile Platform (SMP) SDK 3.0 SP and PL level agnostic
  • SAP Cloud Platform Mobile Services for Development and Operations
  • SAP Cloud Connector

Product

SAP Mobile Platform 1303, enterprise edition, cloud version ; SAP Mobile Platform SDK 3.0 ; mobile service for development and operations 1.0

Keywords

Mobile Operations & Development ; SMP SDK; APK; Fiori Cloud Build; scp, cp, scpms, cpms, hcpms, hcp , KBA , MOB-CLD-SEC , CP mobile service for dev & ops security , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.