SAP Cloud Platform . Java - AuthenticationHeaderProvider API - Setting Email as nameId

479 Views Last edit Apr 05, 2017 at 07:32 AM 2 rev

Hello,

I want to authenticate against the SAP Jam Rest API using the SAP Identity provider.

To forward the user that has logged in via the IDP I tried to use the

AuthenticationHeaderProvider API.

Sadly my Jam tenant returns a 401 Http Status.

The error message is:

com.sap.core.connectivity.apiext.impl.authentication.assertion.oauth.OAuthTokenGenerationException: Could not retrieve OAuth 2.0 access token for user C5*****

I know that SAP Jam needs the email address and not the the SAP user id to authenticate a user. I actually thought this was set by the "nameIdFormat" and "userIdSource" paramter of the DestinationConfiguration.

I followed this example to set up the DestinationConfiguration:

https://help.hana.ondemand.com/cloud_portal_flp/frameset.htm?1f122e4427fa4e36b93fcbac2864005a.html

If you have any suggestion how to fix this issue I would be very thankful.

Kind regards,

Jonas