SAP Knowledge Base Article - Public

2890729 - Intermittent error: Response doesn't have any valid assertion which would pass subject validation in SAP Analytics Cloud (SAC)


  • After successfully configure Microsoft Azure IDP authentication with SAP Analytics Cloud tenant, after several days try to login will fail with error
    Response doesn't have any valid assertion
  • When the error occurs in one client browser, the login will always fail with this error.
  • After cleaning browser cache will solve the error. But after some days, the same error may occur again.


  • SAP Analytics Cloud (Enterprise) 2019.21


  • The authentication was rejected because there was too great a difference between the time the authentication was initiated (IssueInstant) and the time when the IDP last authenticated the user (AuthnInstant)

  • The default for maxAuthenticationAge in SAP Cloud Platform was 10 days. 
    The issue only occurs, if an SAML2 IDP issues in an SAML2 Assertion an AuthnInstant time and current time+date differs more than 10 days.


In Microsoft Azure IDP side, configure authentication session management to make sure the session lifetime should be less than 10 days.
See Microsoft document:

See Also

Your feedback is important to help us improve our knowledge base.


SAP Cloud for Planning, sc4p, c4p, cforp, cloudforplanning, Cloud for Analytics, Cloud4Analytics, CloudforAnalytics, Cloud 4 Planning, BOC, SAPBusinessObjectsCloud, BusinessObjectsCloud, BOBJcloud, BOCloud., SAC, SAP AC, Cloud-Analytics, CloudAnalytics, SAPCloudAnalytics,Error, Issue, System, Data, User, Unable, Access, Connection, Sac, Connector, Live, Acquisition, Up, Set, setup, Model, BW, Connect, Story, Tenant, Import, Failed, Using, Working, SAML, SSO, sapanalyticscloud, sap analytical cloud, sap analytical cloud, SAC , KBA , LOD-ANA-BI , Business Intelligence Functionality, Analytic Models , Problem


SAP Analytics Cloud 1.0