CORS Policy in SAC with live connection to BW

[maria_hjelm]

Hello!

We have been running SAC dashboards from our CRM system via an URL that is inserted in the CRM system.

Last week we had a security update on our network and now this is not working anymore. No changes have been made in BW or SAC!

We have a live BW connection with SAML to our SAC system and we have no problems running stories directly in SAC, it is when we call the stories from our CRM system we get the problem.

We get to SAC but when SAC calls BW we get the following error:

Access to XMLHttpRequest at 'https://lspappbw01.itpap.local:44300/sap/bw/ina/GetServerInfo?sap-client=010' from origin 'https://papyrus-1.eu10.hcs.cloud.sap' has been blocked by CORS policy: Permission was denied for this request to access the `unknown` address space.

Running the same URL directly in edge works fine and also in SAC.

Can you advice what to do?

/Maria