Problem with xsuaa 2 ams

[T1mey]

Hi,

I have some troubles following the guide to switch from xsuaa to ams.
We're using the managed approuter and when chaning we open the application it shows an error

GET request to /1085d0c3-375d-4d04-ba31-242645166cb4.myapp.myapp-1.0.0/index.html completed with status 500 Failed to exchange login token by an XSUAA token Failed to exchange token: {"error":"invalid_client","error_description":"Bad credentials"}, token details - {"sub":"********","app_tid":"ce04ec9c-c0ca-48f8-b9aa-965c848aafd8","iss":"https://ouraccount.accounts.ondemand.com","type":"employee","given_name":"********","sid":"S-SP-b15600f2-46cb-882b-3bf0477d95c5","ias_iss":"https://ouraccount.accounts.ondemand.com","aud":["9fe98403-3fc1-4f12-921a-2702186f3b90","760bdff3-381c-4d20-a636-1320db8f64c9","d70bb368-1b5a-4ace-9f45-7a2a0cb87e0f","2b5b7b48-e15a-4c53-86e1-683ab73ee187"],"scim_id":"05556bfa-4bc9-b203-da30f41b66ef","user_uuid":"********","login_name":"USERNAME","azp":"d70bb368-1b5a-4224-9f45-7a2a0cb87e0f","cnf":{"x5t#S256":"--sNG2_Gx0XLqTlf71142142SI7ofKJXH4QlcmGys4gmvLviI"},"exp":1767687787,"iat":1767684187,"family_name":"********","jti":"280e70de-ee1f-2342-8876-8431d1e06e7b","email":"********"}, external service credentials details - identityzone: basf-webplatform-dev clientid: sb-myapp!t27891

mention ... @gopalanand333

[T1mey]

Forgot to add the opa buildback to the CAP srv module.
If we do so I get an error during deployment

AMS bundle initialization failed. Unexpected status code 401 from https://ouraccont.accounts.ondemand.com/bundle-gateway/45fb6772-9474-40d8-1234-2dd50a0abd24.dcn.tar.gz on region eu-de-1: no certificate provided","stacktrace":["Error: Unexpected status code 401 from https://ouraccont.accounts.ondemand.com/bundle-gateway/45fb6772-9474-40d8-9ab3-2dd50a0abd24.dcn.tar.gz on region eu-de-1: no certificate provided","at IncomingMessage. (/home/vcap/app/node_modules/@sap/ams/src/core/loader/IdentityServiceBundleLoader.js:127:53)","at /home/vcap/app/node_modules/@opentelemetry/context-async-hooks/build/src/AbstractAsyncHooksContextManager.js:50:55","at AsyncLocalStorage.run (node:internal/async_local_storage/async_hooks:80:14)","at AsyncLocalStorageContextManager.with (/home/vcap/app/node_modules/@opentelemetry/context-async-hooks/build/src/AsyncLocalStorageContextManager.js:33:40)","at IncomingMessage.contextWrapper (/home/vcap/app/node_modules/@opentelemetry/context-async-hooks/build/src/AbstractAsyncHooksContextManager.js:50:32)","at IncomingMessage.emit (node:events:530:35)","at endReadableNT (node:internal/streams/readable:1698:12)","at process.processTicksAndRejections (node:internal/process/task_queues:90:21)"],"layer":"cds","component_type":"application","container_id":"10.36.199.8","component_id":"59637edf-f1e6-464e-a37f-eef1b4c7e1b0","component_name":"cap-srv","component_instance":0,"source_instance":0,"organization_name":"ourorg-dev","organization_id":"xxx","space_name":"DEV","space_id":"xxx","type":"log"}

[gopalanand333]

@T1mey Thanks for sharing the details, step 6 in this tutorial is mandatory: https://github.com/SAP-samples/btp-developer-guide-cap/tree/main/documentation/xsuaa-to-ams
And if the issue persists, you can raise an issue on IAS