Writing down the restriction on SAP user authentication in cloud connector, as I face this issue every time I’m setting cloud connector.

Cloud connector is a secure tunnel established so that applications outside firewall can communicate with on-prem system to consume applications/services from on-prem system. Organzition requires cloud connector if they are running S4 on-prem system and BTP applications needs to consume data S4 system, for example.

In my example, I’m setting up a portal version of cloud connector and can be downloaded here SAP Development Tools.

After the initial installation, I will go to the UI screen and add BTP subaccount.

However, I would always face error “SCC handshake failed: 401 — Unauthorized” and stuck with this step.

After digging in the SAP documents for a while, SAP note 2571763 – Authorization problem in SAP Cloud Connector when adding Cloud Foundry subaccount – SAP for Me gave me the answer. It states that:

“Make sure that the e-mail address is associated with an active S-User ID. To avoid login issues, the e-mail must be associated to 1 S-user ID only.

“In addition, it is not possible to use SAP Universal ID in the Cloud Connector yet. Log on with the password associated with your S-user account.

My SAP User ID look like this. Two different SAP ID(S-user)’s are associated with single email address. This will not pass the first statement above as multiple ID’s are associated with the same email address.

So what I had to do is to create another S user ID with different email address and use that email address and password when setting up BTP subaccount.