tryGetDestination() fails with "Failed to get destination" for NoAuthentication+IAS destination in subscriber tenant context

Describe the Bug

When calling DestinationAccessor.getLoader().tryGetDestination("OneSimAPI_Destination") in a subscriber tenant context, the SDK fails with "Failed to get destination." for a destination configured with
Authentication=NoAuthentication and IAS-based M2M properties (cloudsdk.ias-dependency-name, tokenService.body.url).

The same destination is successfully returned by DestinationService.getAllDestinationProperties() (metadata-only call). The failure happens only during the full resolution via tryGetDestination.

This works correctly for another tenant on the same landscape with the same destination configuration (same auth type, same dependency name, different tokenService.body.url).

Steps to Reproduce

1. Configure a BTP destination in a subscriber subaccount with:
   • Authentication: NoAuthentication
   • cloudsdk.ias-dependency-name: sim-supplier-search-api
   • tokenService.body.url: https://.accounts.ondemand.com
2. Call DestinationAccessor.getLoader().tryGetDestination("OneSimAPI_Destination") in the context of the subscriber tenant
3. Observe failure with "Failed to get destination."

Expected Behavior

tryGetDestination() should successfully resolve the destination. Since the auth type is NoAuthentication, the SDK should not attempt user token exchange. The destination should be returned with its properties so
our code can handle the IAS token fetch separately using the cloudsdk.ias-dependency-name and tokenService.body.url properties.

Screenshots

No response

Used Versions

• SAP Cloud SDK: 5.20.0
• Java: 21
• Spring Boot: 3.x
• Landscape: CF EU30 (prod)

Code Examples

// Our call in DestinationCallProcessor.java
private Try tryGetDestination(String destinationName) {
return DestinationAccessor.getLoader().tryGetDestination(destinationName);
}

Destination configuration (sensitive values removed):
{
"Name": "OneSimAPI_Destination",
"Type": "HTTP",
"Authentication": "NoAuthentication",
"ProxyType": "Internet",
"URL": "https://.prod-eu30.supplier-info-management.procurement.cloud.sap/api/ambassador-srv-api/v1",
"cloudsdk.ias-dependency-name": "sim-supplier-search-api",
"tokenService.body.url": "https://.accounts.ondemand.com"
}

Stack Trace

No response

Log File

Log file

...

Affected Development Phase

Production

Impact

Blocked

Timeline

No response

DestinationAccessor.getLoader().tryGetDestination から開始し、その解決経路を DestinationService.getAllDestinationProperties() と比較します。指定された NoAuthentication プロパティと IAS プロパティを使用して subscriber-tenant のケースを再現し、メタデータの取得は成功する一方で完全な解決が失敗する理由を追跡します。tryGetDestination がユーザートークン交換なしで destination を返し、IAS 関連のプロパティを保持すれば完了です。