SAP CAP Odata service destination(Subaccount) Access

[somnathsap]

Hi, I have created CAP Odata service(XSUAA)
Now I want to access odata from this subaccount Destination so I can build separate SAP Fiori app or access That service from other CAP.
I can access odata service from postman with client secret and ID.
When I created destination with OAuth2UserTokenExchange . I am getting 401 error.
Please suggest.

[CarlosRoggan]

Hello Somnath,

Ivan has already mentioned the concept of token exchange.
Please refer to following 2 blog posts for further details:

https://blogs.sap.com/2022/02/22/sap-btp-security-oauth-2.0-understanding-token-exchange/

https://blogs.sap.com/2022/03/07/sap-btp-security-oauth-2.0-understanding-token-exchange-2-using-des...

So you have to send the user-token that is issued, when enduser logs in to your fiori app, this user-token you have to send to the destination service in a dedicated header, then you get a new token for the target client

I'm not aware how this can be achieved without coding, but there can be many tools/FWKs I'm not aware of.

This might be nevertheless helpful for you to get understanding

Kind Regards,
Carlos