Principal Propagation does'nt work

[former_member741466]

Hi all,

when the user using the virtual data models makes a call to ECC from SCP cloud foundry using the destination with principal propagation, the call does not reach sap and gives the following error: token validation failed:
com.sap.core.connectivity.tunnel.client.sso.InvalidSSOTokenException: Unable to verify trust for JWT principal propagation due to:
at com.sap.core.connectivity.tunnel.client.sso.cf.JWTValidator.validateToken (JWTValidator.java:80) Can you help me? Thank you

[WouterLemaire]

Have you checked the troubleshooting guide for principal propagation?

This might help:
https://blogs.sap.com/2017/06/26/how-to-guide-troubleshooting-principal-propagation-icm-traces/

Also check the wiki:

https://wiki.scn.sap.com/wiki/plugins/servlet/mobile?contentId=494306729#content/view/494306729

[AntalP]

Hi,

Could you check in cloud connector the Principal Propagation list (Cloud to on-premise - principal propagation - trust configuration) if it does contain the IDP?

Try to refresh the list and ensure that IDP is enabled.

Best regards,

Antal