SSO Azure AD unauthorized issue

[hussam_soufi]

Dear Experts,

I would like to set up SSO from Azure AD in my Datasphere.

I have set up everything from the Identity Provider (Azure AD) side.
and also have set everything in Datasphere.

But whenever I get to "Step 4: Confirm that the mapping is working."

I open the link in a new incognito tab and I sign in with SSO normally but then I get unauthorized.
which tells me that the SSO works but I still need authorization.

Can you please direct me the way I can solve this?

Best

Sam

tcodataspherefree.eu10.hcs.cloud.sap

[hussam_soufi]

P.S: I already have done the same with SAP SAC and it worked without any problems and I didn't get any errors or unauthorized statement..

[hussam_soufi]

P.S2: SAC and Datasphere are on the same BTP Space with the same settings. I can't understand why it would work on SAC but not Datasphere!

[hussam_soufi · Accepted solution]

for anyone who sees this in the future, the issue was that you need to add a new claim called "Groups" and put in it "sac" to allow datasphere to access it.
 see screenshot.

Greetz!