Error while setting up a live connection in SAC to DWC

[Sven_Knöpfler]

Dear community

We struggle with the task of creating a live connection from SAC to a DWC tenant.

We followed all the relevant steps from the help document (including "Add a Trusted Origin" of the DWC tenant on SAC and the SAC tenant on DWC):

https://help.sap.com/docs/SAP_ANALYTICS_CLOUD/00f68c2e08b941f081002fd3691d86a7/ad4281e2875949f0b4d45...

We also configured the same custom IDP on SAC and DWC for single sign on. Logging on each system works perfectly fine.

But when we create the live connection in SAC we get the following error after pressing "ok":

Anybody experienced the same issue and found a solution?

Thanks and kind regards

Sven

[Vitaliy-R]

Hi Sven. Did you check if there are any more details about the error in System -> Monitor -> Trace view for this Correlation-ID?

Regards.

[Sven_Knöpfler · Accepted solution]

We found the solution: we had to add allow 3rd party cookies for the SAC URL in the browser, then it worked.

Why we didnt consider this earlier: HANA- and BW-live connections on the same SAC tenant were working without this setting.

[Sven_Knöpfler]

Hi Witallij,

thank you for your response. After your comment, I tried to create the connection again to get another error correlation id -> but it this correlation id is nowhere to be found in the trace view.

Thanks and kind regards

Sven

[Henry_Banks]

Hi Sven,

I'd say it's pretty normal to have a basic usr/pwd connection as a baseline in your test SAC tenant - to check that communication between datasource & SAC is working first, before going further with the SSO config.

best of luck - this is a good candidate for contacting product support .

Regards, H

[Sven_Knöpfler]

Product support is already contacted too and I will update this post as soon as we found the solution. Thanks for your help!

[Henry_Banks]

Hi Sven,

does the connection work if you use Named user / password (before you proceed to SSO authentication) ?

regards, H

[Sven_Knöpfler]

Hi Henry,

thanks for your input. We did not test that and we dont want to because of security/governance obligations. But I agree, it would be interesting to see if that would work. I am quite certain too that it has to do with the SSO/ custom IDP configuration.

Cheers

Sven