WORZONE FIORI APP ONPREMISE - ERROR 403 - Forbidden

[MichaelDouglas]

Hello Guys,

I'm trying to connect my WorkZone Standard edition into my Fiori Lauchpad on premise, I've followed this tutorial, and everything works fine:
https://community.sap.com/t5/technology-blogs-by-members/access-fiori-apps-via-sap-build-work-zone-s...


But now my app is visible in the WorkZone site, but when I try to open this app, this 403 error occurs:

This app on my Fiori Lauchpad is working fine, and showing all company codes from API COMPANY_CODE_SRV. I created this APP from BTP BAS, and deployed it directly by cloud connector on my on premise environment.

Thanks for help!

SAP Build Work Zone, standard edition 
SAP Fiori for SAP S/4HANA 

[Kishan_D]

Hi,

The referred policy:  strict-origin-when-cross-origin is related to UCON settings on the S/4HANA on-premise not allowing the Fiori app to show up within Build WorkZone frame. I would recommend checking and configuring the UCON settings properly to get this working.

If the UCON settings are verified, I would suggest checking below:

- connectivity user authorization in S/4HANA on-premise, audit logs SU53, SM20 etc.

- cloud connector logs/traces/audit for issues.

Regards, Kishan

[MichaelDouglas]

I tried to see all the UCON settings.
I followed this tutorial, and everything is ok. https://developers.sap.com/tutorials/cp-launchpad-federation-consumption.html

I saw the SU53 and SM20 logs and there is no error message, i did a trace on cloud connector and there is no errors too.

Only on work zone error logs has this error bellow:

POST request to /bff/ui-trace/v1/trace completed with status 401 Authentication required,"7ba62be5-10ed-425a-4817-416786855aa1","2024-06-19T17:04:10.936Z","ERROR"

[devika_1]

Is there any solution to this issue,.We are also facing similar issue

[MichaelDouglas]

Hello @devika_1,

I Have created other work zone site and all configurations again, and it works. I will send the configurations I have done again:

Sorry for Portuguese language on print screen:

Channel Manager:

Content Manager:

BTP DESTINATION ( I believe here was the mistake, but as I did everything again, I have no sure about that ).

In my case: novas4dt

In my case: novas4rt

ON S/4

T-CODE: /UI2/CDM3_EXP_SCOPE you have to expose the S/4 Catalogs

https://help.sap.com/doc/16e48a873c2f4b1587b55e3ffa1bff67/1maint/en-US/6b51f4d55acf42d6a7d4dd5f69101...
On item:  1.10.1 Exposing Content to SAP Build Work Zone, Standard Edition

Result:

When you open the app on WorkZone, will open a new window with the S4 environment.