web
You’re offline. This is a read only version of the page.
close
Skip to main content

Announcements

Welcome to the Power Platform Communities
News and Announcements icon
Community site session details

Community site session details

Session Id :
Power Platform Community / Forums / Power Automate / SAP connector using SS...
Power Automate
Unanswered

SAP connector using SSO : Error from token exchange

(0) ShareShare
ReportReport
Posted on by jpreston4 175

We want to connect Power Platform to SAP using SSO. We have setup the onprem gateway. and environment. We can create a Flow to SAP using SAP hardcoded authentication. To setup SSO, we have followed this article , https://blogs.sap.com/2023/06/19/principal-propagation-in-a-multi-cloud-solution-between-microsoft-azure-and-sap-part-vii-invoke-rfcs-and-bapis-with-kerberos-delegation-from-microsoft-power-platform/

 

In the 'Call SAP function (v2)' step, we have used this configuration

{ "MessageServerHost": "",

"Client": "xxx",

"LogonType": "Group",

"MessageServerService": "xxxx",

"SncLibraryPath": "",

"SncPartnerName": "",

"SncQOP": "Default",

"SncSso": "On",

"SystemID": "",

"UseSnc": "true" }

 

When we run the flow, we get error " Error from token exchange : Permission denied due to missing Connection ACL" Please advise

Categories:
Using connectors
I have the same question (0)
  • scottwoodall Profile Picture
    scottwoodall Microsoft Employee on at

    Hello @jjpreston291 -

     

    Can you share a client request ID so I can check our logs to investigate further? If there isn't a client request ID that is presented in the user interface; you can check the browsers developer tools for this information.

     

    Cheers,

    Scott

  • jpreston4 Profile Picture
    jpreston4 175 on at

    @Scott 

    Thanks for the response. 

    ID is "65524db4-20b8-4d54-ab94-555368d9949c"

     

    jjpreston291_0-1695138353671.png

     

  • scottwoodall Profile Picture
    scottwoodall Microsoft Employee on at

    @jjpreston291 thank you for sharing.

     

    For this particular error, the most helpful logs will be on the on-premises data gateway server. We can increase the verbosity of our SAP Common Crypto Lib logs by editing the sapcrypto.ini file on the gateway machine. Add the following and then restart the on-premises data gateway service.

     

    ccl/trace/level=4
    ccl/trace/directory=C:\somedirectory\logs

     

    After these changes have been made and the service restarted; go back to Power Automate and reproduce the error. There should be additional log files in the directory that you specified to help understand the root cause.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

News and Announcements

Welcome to the Power Platform Communities

Quick Links

Season of Sharing Community Challenge Winners!

Congratulations to our community stars!

Kudos to our 2025 Community Spotlight Honorees

Expanding mentorship, skilling, and AI innovation

Congratulations to the June Top 10 Community Leaders!

These are the community rock stars!

Leaderboard > Power Automate

#1
11manish Profile Picture

11manish 227

#2
David_MA Profile Picture

David_MA 204 Super User 2026 Season 1

#3
Valantis Profile Picture

Valantis 177

Last 30 days Overall leaderboard

Featured topics

Known issue with browser automation in Power Automate for Desktop on Google Chrome 146 and 147
Share your ideas and struggles with building Power Automate flows!
Survey: Power Automate mobile app
How to Ask for Help with Your Power Automate Workflow
Flows are not visible for users who sign in with their personal accounts
Start and wait for an approval action
Restore a deleted flow
List of actions cheat sheet for Power Automate Desktop
Welcome to the Power Automate forum!

Product updates

Microsoft Power Platform Community release plans