Fiori-Style Analytics Dashboard: 'Invalid Username/Password' Error for Non-Manager Users

[Sisira]

After logging into SAP Business One, our system automatically loads the Fiori-style Analytics dashboard (Pervasive Analytics). While the Manager user has no issues accessing the dashboard, other users consistently receive an "Invalid Username/Password" error when the dashboard loads.

Details:

• SAP Business One Version: Sap Business One 10 FP 2502
• Database: SAP HANA (SLD connection user is SYSTEM)  - version Hana 2.00.059
• Issue: After successful login to SAP Business One, the Fiori-style dashboard attempts to load and fails for non-manager users with the error "Invalid Username/Password".
• Manager User: Works perfectly without any errors.
• Other Users: Despite having the required permissions for analytics, they are facing authentication issues only with the dashboard.

What I've Checked/Done:

• User Permissions: Verified that all affected users have the necessary authorizations for Analytics and Pervasive Analytics.
• SLD & Database Connection: Confirmed that the SLD database connection user is SYSTEM, which has all required privileges.

My Questions:

1. What could cause the "Invalid Username/Password" error for non-manager users when accessing the Fiori-style dashboard, given that the Manager user works fine??
2. Are there any known configuration settings or workarounds for ensuring that all users benefit from the SYSTEM user's privileges (like PAL_ROLE and AFL execution rights) when accessing Analytics?

[maenmustafa]

hello agian , 

the problem happened because the keycloak (authentication service) by default enforce all users to lowercase , so when you are login with sap b1 user with mixed cases or upper case this problem will show due to the above reason , the cockpit will not accept the login because the username passed is in lower case , i have figured out what is the issue ,   i have recompiled jar files that in charge of username and post them .. here is the complete guide for best results : 

download my new compiled keycloak_tolowercase.tar.gz from here : 

https://github.com/maenmustafa/keycloak/blob/main/keycloak_tolowercase.tar.gz

place it in any folder .. 

then extract it .. 
tar -xvf keycloak_tolowercase.tar.gz
go to the original folder and  backup the original jar files : 
cd /usr/sap/SAPBusinessOne/Common/keycloak/lib/lib/main

cp     org.keycloak.keycloak-crypto-default-24.0.4.jar    org.keycloak.keycloak-crypto-default-24.0.4.jar.bak
cp     org.keycloak.keycloak-model-jpa-24.0.4.jar    org.keycloak.keycloak-model-jpa-24.0.4.jar.bak
cp     org.keycloak.keycloak-model-storage-24.0.4.jar    org.keycloak.keycloak-model-storage-24.0.4.jar.bak
cp     org.keycloak.keycloak-model-storage-private-24.0.4.jar    org.keycloak.keycloak-model-storage-private-24.0.4.jar.bak
cp     org.keycloak.keycloak-server-spi-24.0.4.jar    org.keycloak.keycloak-server-spi-24.0.4.jar.bak
cp     org.keycloak.keycloak-server-spi-private-24.0.4.jar    org.keycloak.keycloak-server-spi-private-24.0.4.jar.bak
cp     org.keycloak.keycloak-services-24.0.4.jar    org.keycloak.keycloak-services-24.0.4.jar.bak

then back to the orignal folder where the jar files exist 

cp org.keycloak* /usr/sap/SAPBusinessOne/Common/keycloak/lib/lib/main

back to keycloak directory : 
cd /usr/sap/SAPBusinessOne/Common/keycloak/lib/lib/main
 
 
 
chmod 775     org.keycloak.keycloak-crypto-default-24.0.4.jar
chmod 775      org.keycloak.keycloak-model-jpa-24.0.4.jar
chmod 775      org.keycloak.keycloak-model-storage-24.0.4.jar
chmod 775      org.keycloak.keycloak-model-storage-private-24.0.4.jar
chmod 775      org.keycloak.keycloak-server-spi-24.0.4.jar
chmod 775      org.keycloak.keycloak-server-spi-private-24.0.4.jar
chmod 775      org.keycloak.keycloak-services-24.0.4.jar

chown b1service0:b1service0     org.keycloak.keycloak-crypto-default-24.0.4.jar
chown b1service0:b1service0      org.keycloak.keycloak-model-jpa-24.0.4.jar
chown b1service0:b1service0      org.keycloak.keycloak-model-storage-24.0.4.jar
chown b1service0:b1service0      org.keycloak.keycloak-model-storage-private-24.0.4.jar
chown b1service0:b1service0      org.keycloak.keycloak-server-spi-24.0.4.jar
chown b1service0:b1service0      org.keycloak.keycloak-server-spi-private-24.0.4.jar
chown b1service0:b1service0      org.keycloak.keycloak-services-24.0.4.jar

Login to Authentication Service

https://ServerIP_Or_Name:40020/auth/admin/sapb1/console/ 

login with B1SiteUser and password and then go to users 

.. delete all users EXCEPT b1siteuser

now restart the services

service sapb1servertools-authentication restart

the login to sap business one and the problem is solved.

Regards

Maen