cancel
Showing results for 
Search instead for 
Did you mean: 

Fiori app deployed to BTP ABAP environment gets "403 blocked by UCON" error

WenjingLiu
Participant
0 Kudos

Hi there.

I am using an SAP BTP Trial account, and following the SAP Tutorial "Create a SAP Fiori App and Deploy it to SAP BTP, ABAP Environment". I can test run the app from Business Application Studio (refer to the screenshot), and I have successfully deployed the app. However I will be asked to log in with SAP Universal ID then get 403 error when I use the deployed app URL below.

https://6654aaf7-905f-48ea-b013-3811c03fcba8.abap-web.us10.hana.ondemand.com/sap/bc/ui5_ui5/sap/znov...

The error message reads "403 Forbidden The request has been blocked by UCON. Server time: 2022-10-10 00:13:10". I suspect it is some issue related to "CORS", but I am new to Fiori and don't understand things under the hood. Can anyone kindly explain the situation? Thanks!

Anyway, here is some endpoint information. Please let me know if it is not sufficient.

P.S. I am not sure whether this question is related. Just list it here for reference.

Update:
Alright, it is not "CORS". My SAP Universal ID has two P-User IDs, say P1 and P2. I created everything such as the trial account and the app with P1, and I get 403 error with P1. If I log in with the Universal ID and then select P2, I will be able to access the Fiori app. It seems to be some issue between "Trial systems and Universal IDs"?

WenjingLiu
Participant
View Entire Topic

Hi,

if you receive a 403 for your service or app, please make sure

  1. you linked the UIAD object of your UI5 application to an IAM App and
  2. you published the IAM App and a Business Catalog containing the app via ADT ('Publish locally' button, top right corner of both ADT UIs).

This might take some time, depending on current system load, but should lead to your UI being accessible via the path /sap/bc/ui5_ui5/sap/<BSP app name>.

Best Regards,

Thomas