Error 401 Unauthorized when consuming CPI services with superadministrator S/User

[danfqa]

Hello experts!

I greatly appreciate your assistance in this scenario: An authorization error (401 Unauthorized) is occurring when trying to consume services exposed by CPI using a dialog S/User. The email associated with this S/User is not a group email and all role collections, including ESBMessage in BTP, have been assigned. Moreover, it's a super administrator, active, and linked. Access to the tenant is possible for development, but when trying to consume, the error occurs. What could be happening?

Thank you so much!

Best regards.

[CarlosRoggan]

Hello Daniel,

thanks for the detailed description, but still few questions remaining:
- you have an iFlow with HTTPS-sender adapter which you're trying to invoke?
- this endpoint is configured to require a Role? or certificate? Standard Role ESBMessaging.send?
- and this role is assigned to the user via role collection? As you mentioned?
- you're calling the endpoint URL with Basic Authentication and sending the credentials of the user?
- nevertheless: did you create a service instance of it-rt?
- have you tried calling the endpoint using clientid/secret?
- have you tried calling the endpoint using clientid/secret and password-credentials flow for fetching a token?

[danfqa]

Hello Carlos,

Thank you so much for your response! Let me explain: Adapter: SOAP; Authorization: User Role, the ESBMessaging.send is assigned to the mentioned S/User. Basic authentication (username and password) is being used. The instance of the it-rt (Process Integration Runtime) service has not been created in BTP. Could that be the cause of the error? Therefore, I haven't used other authentication methods for it-rt. However, using other S/Users does allow consumption of CPI services.

Best regards,