Side by Side extension APPlication

[junwu]

Hello Experts,

We are facing a peculiar issue for our custom side by side application which we have created BTP with S4HANA public cloud. 

Our architecture includes "S4HANA extensibility service" for creating communication arrangements on the Public cloud side along with the development of custom app using NODE.js within CF framework. 

Our destination service connectivity is all intact and we have been able to pull the metadata of the service using the user id and password we provided in the json file we used for the "S4HANA extensibility service"

We have one subaccount and have tied it up with the IAS/IPS server of the S4HANA public cloud. Our global account is still tied up with the standard (default) SAP ID.

When we try to get to our portal/workzone subscription site, we get authenticated via IAS server of public cloud which is correct. However, when the site tries to open, we get the below error 

Appreciate your help.

[junwu]

????where is the error?

[HenrikeGroetecke]

Hello,

Thank you very much for your question. I'm very sorry for the late response.

Can you please check whether the following information (GenAI was used to help generate this content) solves the issue?

It seems like you are encountering an authentication issue when trying to access your portal/workzone subscription site. This issue might be related to the configuration of identity providers and the integration between SAP BTP and SAP S/4HANA Cloud.

Possible Solutions

1. Identity Provider Configuration:

   • Ensure that the SAP BTP subaccount is correctly configured to use the IAS of the S/4HANA Cloud. This involves setting up trust and federation with identity providers. You can refer to the documentation on Trust and Federation with Identity Providers Configuration of Integrated SAP BTP Apps for detailed steps.

2. Communication Arrangements:

   • Verify that the communication arrangements are correctly set up in the S/4HANA Cloud. This includes ensuring that the correct user credentials are used and that the destination service is properly configured.

3. Error Handling:

   • If you are seeing specific error messages, such as ‘Refused to connect’ or ‘unexpected AuthnResponse’, these might be related to domain allowlisting or multiple identity providers being enabled. Check the Configuration of Integrated SAP BTP Apps for troubleshooting steps.

4. Session Management:

   • Consider configuring automatic sign-out settings to ensure that sessions are managed correctly across integrated applications. This can help prevent authentication errors related to session timeouts.

5. Technical User Setup:

   • Ensure that the technical user for CPI is correctly set up with the necessary roles and permissions. If you are using a custom IAS, make sure that the technical user is configured to authenticate against it. You can find more information on setting up a technical user in the Technical User CPI with Custom IAS Technical user CPI with custom IAS blog.

[1] Configuration of Integrated SAP BTP Apps

[2] Technical user CPI with custom IAS

Kind regards, 
Henrike