Trying to access XSA UAA via browser and getting The subdomain does not map to a valid identity zone

[alegru90]

Hello, I have installed the HANA Express and XSA on the AWS EC2 instance. Everything is OK, I can access the xs using xs l command in terminal and can list apps via xs apps. But when I try to access the XS Cockpit in the browser, I get redirected to the https://public_dns_of_the_ec2:39032/uaa-security/oauth/authorize - which is fine I think since I need to login first. But the thing is that on that URL, I get:

I did find on the internet that I need to update the xs-uaa.json which is located here:
/hana/shared/HXE/xs/uaaserver/tomcat/webapps/uaa-security/WEB-INF/classes/xs_uaa.json and to add the redirect_uris, which I did:

{
"xsappname": "uaa",
"scopes": [
{
"name": "uaa.user",
"description": "Default scope for user",
"granted-apps": ["xs_user","*"]
}
],
"redirect_uris": [
"https://ec2-public-ip.eu-central-1.compute.amazonaws.com/*",
"https://public-ip/*"
]
}

I have restarted Hana using HDB stop and HDB start, but still facing the same issue.

Does anyone knows how I can fix this, so that I can access the XS Cockpit via browser?

[demetrioparrilla]

When trying to access the XSA UAA (SAP HANA Extended Services, Advanced User Account and Authentication) via a browser and encountering the error message "The subdomain does not map to a valid identity zone," it typically indicates a configuration issue. Here are steps you can take to troubleshoot and resolve this problem:

• Check the URL
• Verify Subdomain and Identity Zone Configuration
• Check XSA Configuration
• Check UAA ConfigurationDNS Configuration
• Logs and Diagnostics
• Restart Services
• Contact Support

[alegru90]

Thanks ChatGPT