Security · troubleshooting
The destination name is the contract
The destination name is the contract. OAuth, principal propagation, secret store. 401 is identity, not ‘AI is down’. From the delivery checklist: S/4: OAuth2SAMLBearer, AI Core: binding/OAuth; Token URL and client, basic auth yasak; Secret rotasyon tarihi = dest update tarihi; ACL path and virtual host / sap-client. This note is in the Security cluster. Independent Istanbul consulting: inbound is email and the form on this page; destination, identity and the call site (S/4 vs BTP) are written in discovery.
Where it sits on the landscape
Where it sits on the landscape. OAuth, principal propagation, secret store. 401 is identity, not ‘AI is down’. Write the call site (S/4 vs BTP) and the identity chain in discovery; do not mix layers in the same sprint.
- Where it sits on the landscape.
- OAuth, principal propagation, secret store. 401 is identity, not ‘AI is down’.
- Inbound is email and the form on this page.
OAuth, basic, SAML Bearer
OAuth, basic, SAML Bearer. OAuth, principal propagation, secret store. 401 is identity, not ‘AI is down’. Checklist: S/4: OAuth2SAMLBearer, AI Core: binding/OAuth; Token URL and client, basic auth yasak; Secret rotasyon tarihi = dest update tarihi. Write the call site (S/4 vs BTP) and the identity chain in discovery; do not mix layers in the same sprint.
- S/4: OAuth2SAMLBearer, AI Core: binding/OAuth.
- Token URL and client, basic auth yasak.
- Secret rotasyon tarihi = dest update tarihi.
Cloud Connector, Location ID, 502
Cloud Connector, Location ID, 502. OAuth, principal propagation, secret store. 401 is identity, not ‘AI is down’. Checklist: ACL path and virtual host / sap-client. Write the call site (S/4 vs BTP) and the identity chain in discovery; do not mix layers in the same sprint.
- Cloud Connector, Location ID, 502.
- OAuth, principal propagation, secret store. 401 is identity, not ‘AI is down’.
- Inbound is email and the form on this page.
FAQ
What decision does this note record?
The destination name is the contract. OAuth, principal propagation, secret store. 401 is identity, not ‘AI is down’. S/4: OAuth2SAMLBearer, AI Core: binding/OAuth.
What belongs in the discovery note?
S/4: OAuth2SAMLBearer, AI Core: binding/OAuth; Token URL and client, basic auth yasak; Secret rotasyon tarihi = dest update tarihi. Call site, destination and authorisation are written before build.
Do you sell SAP licences or claim SAP Partner status?
No. Independent Istanbul delivery. Inbound is email and the form on this page. Licences are bought from SAP.
Need this decision on your landscape? Written pre-assessment in 48 hours.
We do not sell licences. Destination, authorisation and model placement are written down.