Problems getting GET Request work with SAP Datasphere via Microsoft Authenticator

We are testing SAP Datasphere.

We want to let our users use KNIME to consume data from the exposed OData API. See Consume Data via the OData API.

If we take the example URL:

https://datasphere-tenant.eu10.hcs.cloud.sap/api/v1/dwc/catalog/spaces

We can see the json data in the browser.

We use the “Microsoft Authenticator” node.

• Authorization endpoint → Custom → Endpoint URL:

https://login.microsoftonline.com/Azure-Tenant-ID/

Scope → Custom

• https://X/user_impersonation

• Url found in Entra App “SAP Cloud Platform Identity Authentication” in Web API.

Then running the Node, a pop-up is shown for Approval.

After requesting approval, our Azure Admin was notified and granted access.

We can login and then execute “Microsoft Authenticator” successfull.

Then we use a “GET Request” node, and add a Credential Port.

The try to GET: /api/v1/dwc/catalog/spaces

But we just get an “Execute failed: Wrong status: 401 Unauthorized”

Does anyone know how to debug this?

• Is this maybe a API/scope setting in Azure?

• Or is Token passing from Microsoft Authenticator node to GET Request not working?

• Or is it maybe configuration in Datasphere ?