terraform plan on trial account results in unauthorized error

[sharathmg-sap]

Dear Team,

I tried to use the trial account for implementing terraform in the sample of SIT JUNE2025.

The terraform init was fine.The tfvars file details ar below:

globalaccount = "337d3447trial-ga"
idp = "sap.default"
project_name = "Sharath"

When I run terraofrm plan, I get the error:
╷

│ Error: unableToCreateClient
│
│   with provider["registry.terraform.io/sap/btp"],
│   on provider.tf line 14, in provider "btp":
│   14: provider "btp" {
│
│ received response with unexpected status [Status: 400; Correlation ID: bc00f096-5ca7-36cc-cf9f-267481ed08f2]
╵
╷
│ Error: Unable to create CF Client
│
│   with provider["registry.terraform.io/cloudfoundry/cloudfoundry"],
│   on provider.tf line 18, in provider "cloudfoundry":
│   18: provider "cloudfoundry" {
│
│ Client creation failed with error oauth2: "unauthorized" "The origin provided in the login_hint does not match an active Identity Provider, that supports password grant."

Is this a restriction on trial account using terraform for managing its content? or something to do with config.

[lechnerc77]

Hi @sharathmg-sap , can you please check the following points:

• Is the value for the global account set in your tfvars file is the subdomain of your global trial account? The 400 error indicates that this value might be incorrect.
• Are the values for username and password that you provide correct?

You can leave out the value for IDP when you are using the SAP standard one.

For the CF error please checkcthe following points:

• Is the value for the region in your .tfvars file one that is supported for your trial (us10 or ap21)?
• Are the values for username and password that you provide correct?

[hiwiton]

@sharathmg-sap, is your error resolved, I have the same issue, and I'm able to log in using the same credentials on the UI but unable to do with using the terraform.

[sharathmg-sap]

Hi @lechnerc77 ,

The tfvars file code is modifed as below:
`globalaccount = "337d3447trial-ga"
project_name = "Sharath"

bas_service_name = "sapappstudio"
bas_plan = "standard-edition"
bas_admins = ["admin1@example.com", "admin2@example.com"]
bas_developers = ["dev1@example.com", "dev2@example.com"]

cf_plan = "standard" `

The subdomain from trial account is as per the below screenshot.

The userid password should be correct, but the email ID used is linked to multiple S User IDs. Does that cause any issue?

I tried again with these settings and still get the below error:

│ Error: Unable to create CF Client │ │ with provider["registry.terraform.io/cloudfoundry/cloudfoundry"], │ on provider.tf line 18, in provider "cloudfoundry": │ 18: provider "cloudfoundry" { │ │ Client creation failed with error oauth2: "unauthorized" "The origin provided in the login_hint does not match an active Identity Provider, that supports password grant."

[lechnerc77]

@sharathmg-sap , that might cause the issue:

1. Please make sure that the points mentioned in the Terraform documentation i.e. the SAP note referenced there are fulfilled for the S-User you want to use: https://registry.terraform.io/providers/SAP/btp/latest/docs#important-note-about-authentication

2. Instead of the email, use the S-User ID of the user that you want to use and that fulfills the prerequisites.