401 Not Authorized :Logon Failed error on 'Call Browser' in tcode /IWFND/Maint_Service

[vikjaiswal]

Hello Experts,

I am a trainee in ODATA services and facing below issue. When I trying to do 'Call Browser' in the Tcode /IWFND_Maint_Service (SAPGUI) for any odata service or Catalog Service, it opens up the browser (MS Edge) but does not prompt for user credentials and directly gives 401 Not Authorized error. I do have the required system access. I have tried removing all browser cookies and saved password but it is still not prompting for user credentials. When I updated the browser, only once it asked for user credentials and when I entered the same, it worked. But after some time again, the issue continued.

After I login into the Fiori Link, when I change the port number from 8001 (above url ) to 8443 (Port number used in Fiori link , it works.

Any help will be appreciated. Thanks in advance.

[junwu]

no need to waste time one this. just move on.

[Ulrich_Schmidt · Accepted solution]

It looks like the authentication settings for the Service(s) have been defined differently for the 8001 and the 8443 port. It is possible to enable different types of authentication (and the order in which they are evaluated) per Service definition. For example

1. certificate-based authentication
2. SAML-based authentication
3. SAP Logon Ticket
4. Basic Authentication (User&Password)
5. etc...

If it works ok for the 8443 port, I suggest that you go to transaction SICF, display the two Services (one for 8001 and one for 8443) and compare the settings on the "Logon Data" tab to find the difference.

(One possible reason could for example be, that 8001 has certificate-based authentication "higher up" in the list than 8443, and your browser automatically sends a client-certificate, when prompted by the backend, but this certificate is not trusted by the backend. Then authentication fails, before it comes to the point where the backend would prompt for User&Password....)