SAP BDC Troubleshooter (symptom-lookup only)
Narrow skill: given an error message or a described failure, return the matching SAP Note, the one-line cause, and concrete steps — nothing else. Curated against 22 SAP Notes (18 from the 2026-04-13 batch + 4 new from the 2026-04-15 batch) plus 4 procedural rules from the 2026-05-02 SAP help.sap.com batch.
Scope rule
In scope (use this skill):
- User pastes an error message or stack trace
- User cites an SAP Note number
- User describes a failure whose symptom matches the tables below
Out of scope (route elsewhere):
- "How do I set up BDC?" →
bdc-onboarding
- "How do I manage users / configure SCIM / monitor capacity?" →
bdc-core-admin
- "How do I publish / enrich a catalog asset?" →
bdc-governance-catalog
- "How does BDC Connect / Delta Sharing work?" →
bdc-connect-sharing
- "How do I install an intelligent app?" →
bdc-intelligent-apps
- "How do I work with SAP Databricks?" →
sap-databricks
Workflow
- Identify the symptom in the tables below.
- If an MCP tool matches (the
sap-bdc server exposes diagnose_share_error, validate_tenant_hostname, check_deletion_vectors, cleanup_orphaned_data_product), call it first. Don't paraphrase — call the tool and cite its output.
- Cite the SAP Note by number. Never invent note numbers.
- Give the resolution as numbered steps, not prose.
- Fallback: unknown symptoms → SAP Note 3653192 (main troubleshooting guide) + SAP Note 3568017 (how to file a support case).
Symptom → SAP Note index
Provisioning
| Symptom |
SAP Note |
Fix |
| BDC Core provisioning hangs indefinitely |
3652165 |
tenantHostName must match [a-z0-9-]+ — no uppercase, no leading/trailing hyphens. Delete failed instance, retry lowercase. Pre-check with validate_tenant_hostname MCP tool. |
| "The host name XXX is already being used" |
3705747 |
Hostname taken in that region. Pick different. |
| SAC tenant stuck at "Processing" |
3605796 |
SAC licenses not assigned. Go back and assign them. |
| Can't find BDC provisioning with BTPEA/CPEA |
3599696 |
BDC does NOT use CPEA/BTPEA credits. Buy BDC offering separately; existing tenants can't migrate. |
| How do I provision SAP Datasphere? |
3459708 |
BDC model: enable BDC Core first, then provision DS tenant. BTPEA/CPEA: separate flow. |
SAP Databricks login & identity
| Symptom |
SAP Note |
Fix |
"We've encountered an error logging you in" + oidc_code_exchange_failure |
3678584 |
Client secret expired (6-month rotation). Exclude IAS tenant from "Integration with SAP Databricks" Formation, re-include, retry login. |
| "SAP Cloud Identity Service Integration Not Configured" |
3706392 |
Wait up to 30 min after provisioning. If persistent, open case with component BDC-DBX-CON. |
| Second Databricks tenant with same CIS fails |
3694878 |
One CIS can only join one formation. Use different CIS or new formation. |
| SCIM: "Only one replace operation is allowed" |
3738570 |
Databricks SCIM limitation vs SAP IPS. Apply IPS transformation workaround in the note or provision users one at a time. |
Delta Sharing / BDC Catalog / CSN
| Symptom |
SAP Note |
Fix |
create_or_update_share_csn → "unable to serve your request" / errorCode 500 |
3706399, 3717031 |
Run check_deletion_vectors MCP tool first. Verify grants, table existence, and that metastore admin hasn't changed. |
| NEW 2026-04-15 Share CSN creation fails, metastore owner mismatch |
3665741 |
Update metastore owner to proper UUID: databricks metastores update <metastore-id> --owner <service-principal-id>. |
| Orphan Data Product in BDC Catalog after Databricks share deleted |
3720724 |
Recreate empty share with same name, grant to recipient, unpublish+delete via SDK. Or call cleanup_orphaned_data_product MCP tool. |
| "Business Name" missing in Unity Catalog for shared Data Products |
3725086 (v3, 09.04.2026) |
Fixed by Databricks — ensure recent cluster runtime, re-mount if needed. |
NULL SAP dates arrive as -0001-11-30 or other negative dates in Databricks |
3736857 |
Coerce SAP 00000000 → true SQL NULL in the Transformation Flow before date cast. |
BDC Connect on Azure (firewall / networking) — NEW 2026-04-15
| Symptom |
SAP Note |
Fix |
AuthorizationFailure 403 when consuming from firewall-protected Azure Databricks |
3718680 |
Add SAP Datasphere VNet subnet ID or public IP to Azure Storage firewall allowlist. Region-specific subnets in note 3726123. |
AuthorizationFailure 403 on parquet read from Azure Storage behind firewall |
3726123 |
Allowlist the SAP Datasphere HANA Database VNet subnet (or public IP) in Azure Storage firewall. Region-specific subnet table is in the note itself. |
Databricks Data Products / ORD validation — NEW 2026-05-02
| Symptom |
Source |
Fix |
| Share dialog rejects the asset / asset missing from "Add Table (File)" picker in SAP Databricks |
help.sap.com "Working with Data Products in SAP Databricks" (May 2026), p.9 |
Asset is a Materialized View — unsupported for Delta Sharing in SAP Databricks. Re-expose as a regular view, or persist as a Delta table. Run list_unsupported_share_assets MCP tool to scan a catalog/schema. |
| Confusion: SAP Note 3706399 says "disable deletion vectors" but the new derived-DP guide says "enable" them |
help.sap.com derived-DP guide (May 2026) p.7–9 vs SAP Note 3706399 |
These are different sides of the share. 3706399 is about consuming an inbound share where deletion vectors break the consume side. The new derived-DP guide is about producing tables in your own SAP Databricks workspace, where delta.enableDeletionVectors=true and delta.enableChangeDataFeed=true are recommended. |
create_or_update_share fails with vague SDK error |
ORD validation rule, May 2026 doc p.14 |
ORD description must NOT contain the shortDescription value. Run validate_ord_metadata MCP tool (or let create_or_update_share v0.5.0+ auto-validate) to catch this before the SDK round-trip. |
| Metastore privilege errors when sharing Delta Shares |
help.sap.com derived-DP guide p.3 |
Principal needs all 6 metastore privileges: CREATE CATALOG, CREATE SHARE, SET SHARE PERMISSION, USE PROVIDER, USE RECIPIENT, USE SHARE. Run validate_databricks_privileges MCP tool to pre-flight, then grant via Catalog → Manage → Metastore → Permissions → Grant. |
HANA Cloud & admin
| Symptom |
SAP Note |
Fix |
| HANA Cloud instance not listed in BDC Customer Landscape |
3731036 |
Ensure HANA Cloud Central is running in the subaccount — it's the Data Product gateway. |
| How do I create a support user for BDC? |
3568907 |
BDC Cockpit → Administration → System Configuration → Allow SAP support user creation. Also KBAs 3200458 (SAC) and 2891554 (DS). |
| How do I file a good BDC support case? |
3568017 |
Check System Availability, distinguish technical vs consulting, include request ID + timestamps. |
| NEW 2026-04-15 Need network trace for a Databricks UI issue |
3600390 |
Generate a browser HAR file per SAP Note 2969368 procedure; attach to the case. |
Response shape
When the user pastes an error:
Matches SAP Note XXXXXXX: <title>
Cause: <1–2 sentences>
Resolution:
1. …
2. …
3. …
Related MCP tool: <tool_name>(args) ← if applicable
Tight. Do not paraphrase note content at length — cite the number and give the steps.
Reference files
22 SAP Notes in references/. Load a specific PDF only when the summary above is insufficient or the user asks for full text.
Core 18 (2026-04-13 batch):
- 3459708, 3568017, 3568907, 3599696, 3605796, 3652165, 3653192, 3678584, 3694878, 3705747, 3706392, 3706399, 3717031, 3720724, 3725086, 3731036, 3736857, 3738570
New 4 (2026-04-15 batch):
references/3600390_E_20260415.pdf — HAR file generation for Databricks UI issuesreferences/3665741_E_20260415.pdf — Updating metastore owner to resolve share CSN creation errorsreferences/3718680_E_20260415.pdf — AuthorizationFailure sharing from Enterprise Databricks on Azurereferences/3726123_E_20260415.pdf — BDC Connect for Databricks: firewall-protected Azure Storage
Refreshed 3 (newer versions from 2026-04-15 batch — prefer these over 04-13 copies):
- 3653192_E_20260415 (main troubleshooting guide)
- 3678584_E_20260415 (OIDC code exchange failure)
- 3725086_E_20260415 (Business Name missing in UC — now v3)
1---2name: bdc-troubleshooter3description: Use ONLY for SAP-Note symptom→fix lookup — i.e. when the user pastes a specific BDC/Databricks error message, cites an SAP Note number in the 34xxxxx–37xxxxx range, or describes a concrete failure (provisioning stuck, CSN publish errorCode 500, OIDC code exchange failure, duplicate hostname, orphan data product, SCIM "only one replace" error, Azure storage 403/AuthorizationFailure, metastore owner share error, negative dates from SAP, Business Name missing in Unity Catalog, HANA Cloud missing from Customer Landscape, CIS integration not configured). For "how do I..." / setup / configuration / conceptual questions, DEFER to the right skill instead — bdc-onboarding, bdc-core-admin, bdc-governance-catalog, bdc-connect-sharing, bdc-intelligent-apps, or sap-databricks. Trigger phrases include "BDC error", "errorCode 500", "AuthorizationFailure", "oidc_code_exchange_failure", "only one replace operation", "tenantHostName invalid", "orphan data product", "Business Name missing", "metastore owner", "HAR file Databric4---56# SAP BDC Troubleshooter (symptom-lookup only)78Narrow skill: given an error message or a described failure, return the matching SAP Note, the one-line cause, and concrete steps — nothing else. Curated against 22 SAP Notes (18 from the 2026-04-13 batch + 4 new from the 2026-04-15 batch) plus 4 procedural rules from the 2026-05-02 SAP help.sap.com batch.910## Scope rule1112**In scope (use this skill):**13- User pastes an error message or stack trace14- User cites an SAP Note number15- User describes a failure whose symptom matches the tables below1617**Out of scope (route elsewhere):**18- "How do I set up BDC?" → `bdc-onboarding`19- "How do I manage users / configure SCIM / monitor capacity?" → `bdc-core-admin`20- "How do I publish / enrich a catalog asset?" → `bdc-governance-catalog`21- "How does BDC Connect / Delta Sharing work?" → `bdc-connect-sharing`22- "How do I install an intelligent app?" → `bdc-intelligent-apps`23- "How do I work with SAP Databricks?" → `sap-databricks`2425## Workflow26271. Identify the symptom in the tables below.282. If an MCP tool matches (the `sap-bdc` server exposes `diagnose_share_error`, `validate_tenant_hostname`, `check_deletion_vectors`, `cleanup_orphaned_data_product`), call it first. Don't paraphrase — call the tool and cite its output.293. Cite the SAP Note by number. Never invent note numbers.304. Give the resolution as numbered steps, not prose.315. Fallback: unknown symptoms → SAP Note 3653192 (main troubleshooting guide) + SAP Note 3568017 (how to file a support case).3233## Symptom → SAP Note index3435### Provisioning3637| Symptom | SAP Note | Fix |38|---|---|---|39| BDC Core provisioning hangs indefinitely | 3652165 | `tenantHostName` must match `[a-z0-9-]+` — no uppercase, no leading/trailing hyphens. Delete failed instance, retry lowercase. Pre-check with `validate_tenant_hostname` MCP tool. |40| "The host name XXX is already being used" | 3705747 | Hostname taken in that region. Pick different. |41| SAC tenant stuck at "Processing" | 3605796 | SAC licenses not assigned. Go back and assign them. |42| Can't find BDC provisioning with BTPEA/CPEA | 3599696 | BDC does NOT use CPEA/BTPEA credits. Buy BDC offering separately; existing tenants can't migrate. |43| How do I provision SAP Datasphere? | 3459708 | BDC model: enable BDC Core first, then provision DS tenant. BTPEA/CPEA: separate flow. |4445### SAP Databricks login & identity4647| Symptom | SAP Note | Fix |48|---|---|---|49| "We've encountered an error logging you in" + `oidc_code_exchange_failure` | 3678584 | Client secret expired (6-month rotation). Exclude IAS tenant from "Integration with SAP Databricks" Formation, re-include, retry login. |50| "SAP Cloud Identity Service Integration Not Configured" | 3706392 | Wait up to 30 min after provisioning. If persistent, open case with component `BDC-DBX-CON`. |51| Second Databricks tenant with same CIS fails | 3694878 | One CIS can only join one formation. Use different CIS or new formation. |52| SCIM: "Only one replace operation is allowed" | 3738570 | Databricks SCIM limitation vs SAP IPS. Apply IPS transformation workaround in the note or provision users one at a time. |5354### Delta Sharing / BDC Catalog / CSN5556| Symptom | SAP Note | Fix |57|---|---|---|58| `create_or_update_share_csn` → "unable to serve your request" / errorCode 500 | 3706399, 3717031 | Run `check_deletion_vectors` MCP tool first. Verify grants, table existence, and that metastore admin hasn't changed. |59| **NEW 2026-04-15** Share CSN creation fails, metastore owner mismatch | **3665741** | Update metastore owner to proper UUID: `databricks metastores update <metastore-id> --owner <service-principal-id>`. |60| Orphan Data Product in BDC Catalog after Databricks share deleted | 3720724 | Recreate empty share with same name, grant to recipient, unpublish+delete via SDK. Or call `cleanup_orphaned_data_product` MCP tool. |61| "Business Name" missing in Unity Catalog for shared Data Products | 3725086 (v3, 09.04.2026) | Fixed by Databricks — ensure recent cluster runtime, re-mount if needed. |62| NULL SAP dates arrive as `-0001-11-30` or other negative dates in Databricks | 3736857 | Coerce SAP `00000000` → true SQL NULL in the Transformation Flow before date cast. |6364### BDC Connect on Azure (firewall / networking) — NEW 2026-04-156566| Symptom | SAP Note | Fix |67|---|---|---|68| `AuthorizationFailure` 403 when consuming from firewall-protected Azure Databricks | **3718680** | Add SAP Datasphere VNet subnet ID or public IP to Azure Storage firewall allowlist. Region-specific subnets in note 3726123. |69| `AuthorizationFailure` 403 on parquet read from Azure Storage behind firewall | **3726123** | Allowlist the SAP Datasphere HANA Database VNet subnet (or public IP) in Azure Storage firewall. Region-specific subnet table is in the note itself. |7071### Databricks Data Products / ORD validation — NEW 2026-05-027273| Symptom | Source | Fix |74|---|---|---|75| Share dialog rejects the asset / asset missing from "Add Table (File)" picker in SAP Databricks | help.sap.com "Working with Data Products in SAP Databricks" (May 2026), p.9 | Asset is a **Materialized View** — unsupported for Delta Sharing in SAP Databricks. Re-expose as a regular view, or persist as a Delta table. Run `list_unsupported_share_assets` MCP tool to scan a catalog/schema. |76| Confusion: SAP Note 3706399 says "disable deletion vectors" but the new derived-DP guide says "enable" them | help.sap.com derived-DP guide (May 2026) p.7–9 vs SAP Note 3706399 | These are **different sides of the share**. 3706399 is about *consuming* an inbound share where deletion vectors break the consume side. The new derived-DP guide is about *producing* tables in your own SAP Databricks workspace, where `delta.enableDeletionVectors=true` and `delta.enableChangeDataFeed=true` are recommended. |77| `create_or_update_share` fails with vague SDK error | ORD validation rule, May 2026 doc p.14 | ORD `description` must NOT contain the `shortDescription` value. Run `validate_ord_metadata` MCP tool (or let `create_or_update_share` v0.5.0+ auto-validate) to catch this before the SDK round-trip. |78| Metastore privilege errors when sharing Delta Shares | help.sap.com derived-DP guide p.3 | Principal needs all 6 metastore privileges: CREATE CATALOG, CREATE SHARE, SET SHARE PERMISSION, USE PROVIDER, USE RECIPIENT, USE SHARE. Run `validate_databricks_privileges` MCP tool to pre-flight, then grant via *Catalog → Manage → Metastore → Permissions → Grant*. |7980### HANA Cloud & admin8182| Symptom | SAP Note | Fix |83|---|---|---|84| HANA Cloud instance not listed in BDC Customer Landscape | 3731036 | Ensure HANA Cloud Central is running in the subaccount — it's the Data Product gateway. |85| How do I create a support user for BDC? | 3568907 | BDC Cockpit → Administration → System Configuration → Allow SAP support user creation. Also KBAs 3200458 (SAC) and 2891554 (DS). |86| How do I file a good BDC support case? | 3568017 | Check System Availability, distinguish technical vs consulting, include request ID + timestamps. |87| **NEW 2026-04-15** Need network trace for a Databricks UI issue | **3600390** | Generate a browser HAR file per SAP Note 2969368 procedure; attach to the case. |8889## Response shape9091When the user pastes an error:9293```94Matches SAP Note XXXXXXX: <title>9596Cause: <1–2 sentences>9798Resolution:99 1. …100 2. …101 3. …102103Related MCP tool: <tool_name>(args) ← if applicable104```105106Tight. Do not paraphrase note content at length — cite the number and give the steps.107108## Reference files10911022 SAP Notes in `references/`. Load a specific PDF only when the summary above is insufficient or the user asks for full text.111112**Core 18 (2026-04-13 batch):**113- 3459708, 3568017, 3568907, 3599696, 3605796, 3652165, 3653192, 3678584, 3694878, 3705747, 3706392, 3706399, 3717031, 3720724, 3725086, 3731036, 3736857, 3738570114115**New 4 (2026-04-15 batch):**116- `references/3600390_E_20260415.pdf` — HAR file generation for Databricks UI issues117- `references/3665741_E_20260415.pdf` — Updating metastore owner to resolve share CSN creation errors118- `references/3718680_E_20260415.pdf` — AuthorizationFailure sharing from Enterprise Databricks on Azure119- `references/3726123_E_20260415.pdf` — BDC Connect for Databricks: firewall-protected Azure Storage120121**Refreshed 3** (newer versions from 2026-04-15 batch — prefer these over 04-13 copies):122- 3653192_E_20260415 (main troubleshooting guide)123- 3678584_E_20260415 (OIDC code exchange failure)124- 3725086_E_20260415 (Business Name missing in UC — now v3)
williamcorrea23