Monitoring and Troubleshooting

This section provides information on troubleshooting-related activities for the SAP Authorization and Trust Management service in the Cloud Foundry environment.

Tip:

We also recommend that you regularly check the SAP Notes and Knowledge Base for component BC-CP-CF-SEC-IAM in the SAP Support Portal. These contain information about program corrections and provide additional information.

To help you troubleshoot your issue, we also recommend increasing the log verbosity of your application and application router. We provide a script to help you. If for some reason you can't use this script, increase the log verbosity manually, see related link.

Our troubleshooting information can be found in our Guided Answers Troubleshooting for the SAP Authorization and Trust Management service in the Cloud Foundry environment. Guided Answers are a specialized format to guide you step by step through troubleshooting topics. Check the individual troubleshooting topics for your error message. If you can't find your problem, create an incident in the component BC-CP-CF-SEC-IAM. For more information, see the related link.

The Security Tab Is Missing in the Subaccount
Access Is Denied or Forbidden
Identity Provider Could Not Process Authentication Request
Logon Screen Shows "SAP HANA XS Advanced"
Requested Route Does Not Exist
Subdomain Does Not Map to a Valid Identity Zone
No Client with Requested ID
Cannot Add Role Templates to Predefined Role Collections
502 Error: Call to /oauth/token Was Not Successful
Unexpected AuthnResponse : Existing authentication - <User>
AuthnRequest expired - ID: <RequestId> Destination: <IdPDestination>
InResponseToField of Response doesn‘t correspond to the sent message
Response issue time is either too old or with date in the future. Sync IdP to match skew <skew>
Trust establishment issues
Token retrieval fails with status code 401