401 Unauthorized - Build Apps Unable to Access BTP Destination API

[depratihari]

Hi Experts,

I am facing strange error while calling SAP Build process automation from SAP Build apps using SAP Build apps published library API integration in which i have published my build process automation API trigger.

Performed all steps correctly in steps provided in "https://help.sap.com/docs/build-apps/service-guide/sap-build-process-automation?q=service+key".

When i debugged the issue i found the error as below

"{
"status": 401,
"statusText": "Unauthorized",
"headers": {
"cache-control": "no-cache, no-store, max-age=0, must-revalidate",
"expires": "0",
"pragma": "no-cache",
"referrer-policy": "no-referrer",
"www-authenticate": "Bearer error=\"invalid_token\", error_description=\"Jwt token with allowed audiences [destination-xsappname!b62, uaa, openid, xs_account, sb-clone850d95a770d2421f962aa985e61e9bda!b107153|destination-xsappname!b62] matches none of these: [xsuaa!b120249]\", error_uri=\"https://tools.ietf.org/html/rfc6750#section-3.1\"",
"x-content-type-options": "nosniff",
"x-frame-options": "DENY",
"x-vcap-request-id": "70a2438e-ac45-4a98-4696-cf9c0fa58649",
"x-xss-protection": "0",
"date": "Sun, 12 Jan 2025 09:18:37 GMT",
"strict-transport-security": "max-age=31536000; includeSubDomains; preload;",
"connection": "close"
},
"responseText": ""
}

Any help will be appreciated.

[WouterLemaire]

How does your destination look like?

[Dan_Wroblewski]

Does your use have participant roles? Can you trigger the process manually via Postman? Have you made a change to the process without republishing (though I think this is a different error)?

[depratihari]

Hi Dan , Yes i have both forms participant & IRPA Participant roles assigned. In Postman Trigger also same error.

[depratihari]

Hello WouterLemaire, I have provided the destination details.

[Dan_Wroblewski]

So it has nothing to do with SAP Build Apps. There is an authentication problem. Best to show (1) how you are connecting in Postman; (2) The destination setup; (3) The service key (blurred of course)

[depratihari]

Hello Dan Please find requested details attached. I lost 2 complete working days to find solution but nothing is working.

[Dinu]

Configure the destination sap_process_automation_service_user_access as (exactly as) described in Configure SAP Build Process Automation Destinations | SAP Help Portal

Notes:

1. Authentication Type

Authentication: OAuth2JWTBearer

2. Don't add additional property

forwardAuthToken: true

[depratihari]

Thanks Dinu for your Inputs. I changed Authentication Type to "OAuth2JWTBearer" also I found I missed one step of adding the Destination in the Destination section of SAP Build control Tower. Its working as expected now

[VaradBhagwat]

Hi, I'm getting 401 unauthorized error while calling Build Workflow API trigger from my SAPUI5 application (both locally running or from Build workzone). The URL called is "https://spa-api-gateway-bpi-us-prod.cfapps.us10.hana.ondemand.com/workflow/rest/v1/workflow-instance..." to get X-CSRF token. My Workflow created as per tutorial https://developers.sap.com/tutorials/spa-academy-run-salesorderprocess.html#fb19e3da-bee0-4477-afc4-... Can you suggest what is the possible resolution for this issue.

What is the correct URL to trigger the BPA workflow API from the SAP UI5 app. And what is the correct method to call the API ?

1. Calling SBPA Workflow API to trigger process from SAPUI5 app

2. 401 unauthorized error -

3. CORS issue while testing UI5 app locally or from Build Workzone