Cloud Identity Services Trial Admin Console Returns forbidden.html

[kmarkovic24]

I created a new SAP BTP Trial account and subscribed to Cloud Identity Services (default plan).

The tenant was created successfully and I can log in. Profile Management works correctly.

However, when I open the Administration Console (either from BTP Cockpit → Go to Application or directly via https://.trial-accounts.ondemand.com/admin), I am redirected to:

/admin/forbidden.html

Additional information:

• User has Subaccount Administrator role.

• Trust Configuration is healthy.

• Administration Console application is shown as ACTIVE for the user.

• Profile Management works.

• Trial account was created on June 10, 2026.

Expected result:
Administration Console opens successfully.

Actual result:
forbidden.html is displayed.

Has anyone seen this with a newly created trial tenant, and is there a way to repair the administrator assignment without recreating the tenant?

[diegojuiz]

Hello kmarkovic24, I have the same problem since yesterday with a newly created trial tennant. I have deleted the trial account an created again and I keep getting the same problem

[diegojuiz]

Did you have a chance to report it to SAP?

[YLN]

Same problem

[kmarkovic24]

Hello Diego, I haven't reported it yet, as I'm not sure how to do that. Could you please report it? Thanks.

[greg_not_so]

Hi all, it never worked for me since the service has been restored into the trial accounts. i suspect an entitlement has been withdrawn or we all maybe testing "something" for SAP.

[Colt]

I remember running into a similar issue. In my case, it turned out to be related to the domain I selected when establishing the OIDC trust. As far as I remember, it worked (in the trial) with the default accounts.sap.com domain, but not with cloud.sap.com... but not quite sure, to long ago 😉

[HarshPatelV]

Interesting case. Since Profile Management works and the app is ACTIVE, I would focus on admin authorization inside Cloud Identity Services rather than BTP roles. Also worth testing with the original tenant creator account and checking whether initial admin provisioning completed correctly. Curious if others have seen this behavior on newly created trial tenants.

[Colt]

Just tested it with an colleague... same issue, forbidden!

[prasannanagaraja]

Hi All,

This solution for this is to login to the IAS account in a new private/incognito window and you should be able to login.

Regards,

Prasanna

[Cesar_Ferreira1]

"The problem I can identify is that the user is not created/active in CIS. I receive the activation email, but then I don't have permissions. This leads me to think that the admin account somehow becomes inactive."