Create External Content Type - Access denied by Business Data Connectivity

Question

Following the technet articles on how to get external data into SharePoint 2013 (for testing purposes) I've created:

• Business Data Connectivity Service with Metadata Store Permissions
• Secure Store Service Application (SSS) with SQL Server credentials (and not windows credentials, since they fail too)

The credentials in SSS are owners of the database Northwind I'm trying to connect to. When signing in with SQL Server Credentials, the user can read and execute the database as expected.

In SharePoint Designer I'm adding the new External Content Type, providing it a name and database server, database and connecting with Impersonated custom identity referencing the SSS. When I provide the SQL Server Credentials, it fails to connect asking for windows credentials. But since windows credentials don't work on the SQL Server login either, I'm stuck in a loop I can't get out of.

Error from SharePoint Designer

Error from SQL Server Log

The Web Application has service connection to BDC, and in the Secure Store Service Application Everyone is member. Still - no connection made because of the access denied error. Why is that, and how do I overcome this issue?

Answer 1

As it turned out, I needed to configure an External Content Type Profile Page Host within the Business Data Connectivity Service.

When the ECT Profile Page Host was configured, I could connect to the database and see the tables from the database within SharePoint Designer.

Answer 2

SharePoint Designer does not use the Secure Store connection. Try creating the ECT first by connecting with user's identity. Once the ECT is created, modify the properties to use the Secure Store application ID.

Answer 3

I had to grant Metadata Store Permissions:

Central Administration > Application Management > Manage service applications > BDC Service Application

• click 'Set Metadata Store Permission'

  

• then add your user and permisisons