SAP Knowledge Base Article - Public

2890729 - Intermittent error: Response doesn't have any valid assertion which would pass subject validation in SAP Analytics Cloud (SAC)

Symptom

  • After successfully configure Microsoft Azure IDP authentication with SAP Analytics Cloud tenant, after several days try to login will fail with error
    Response doesn't have any valid assertion
  • When the error occurs in one client browser, the login will always fail with this error.
  • After cleaning browser cache will solve the error. But after some days, the same error may occur again.

Environment

  • SAP Analytics Cloud (Enterprise) 2019.21

Cause

  • The authentication was rejected because there was too great a difference between the time the authentication was initiated (IssueInstant) and the time when the IDP last authenticated the user (AuthnInstant)

  • The default for maxAuthenticationAge in SAP Cloud Platform was 10 days. 
    The issue only occurs, if an SAML2 IDP issues in an SAML2 Assertion an AuthnInstant time and current time+date differs more than 10 days.

Resolution

In Microsoft Azure IDP side, configure authentication session management to make sure the session lifetime should be less than 10 days.
See Microsoft document: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-session-lifetime

See Also

Your feedback is important to help us improve our knowledge base.

Keywords

SAP Cloud for Planning, sc4p, c4p, cforp, cloudforplanning, Cloud for Analytics, Cloud4Analytics, CloudforAnalytics, Cloud 4 Planning, BOC, SAPBusinessObjectsCloud, BusinessObjectsCloud, BOBJcloud, BOCloud., SAC, SAP AC, Cloud-Analytics, CloudAnalytics, SAPCloudAnalytics,Error, Issue, System, Data, User, Unable, Access, Connection, Sac, Connector, Live, Acquisition, Up, Set, setup, Model, BW, Connect, Story, Tenant, Import, Failed, Using, Working, SAML, SSO, sapanalyticscloud, sap analytical cloud, sap analytical cloud, SAC , KBA , LOD-ANA-BI , Business Intelligence Functionality, Analytic Models , Problem

Product

SAP Analytics Cloud 1.0