SharePoint 2010: Issues with Service Application Proxy & Proxy Group Associations

At times we would see errors while accessing various Service applications. These types of issues manifest with various symptoms at different locations, here is an example of a few I have come across.

Symptom 1:

When you try to access the Managed Metadata Service Application from manage Service Applications, you face the following error:

"The Service Application being requested does not have a connection associated with the Central Administration web application. To access the term management tool use the site settings from a site configured with the appropriate connection"

Symptom 2:

While trying to add the BCS catalog at the External List on a site or trying to add the BCS catalog while creating a sync connection for a BCS source in User profile Service application, we get the following error,

"The Business data connectivity metadata store is unavailable. Check configuration and try again"

Symptom 3:

While BCS sync step is run during an UPA profile sync, we might see this error in ULS logs

05/18/2012 01:00:39.14 miiserver.exe (0x0C1C) 0x23C8 SharePoint Portal Server User Profiles e96j High Error calling FindSpecific : Microsoft.BusinessData.Infrastructure.BdcException: The shim execution failed unexpectedly - Unable to obtain the application proxy for the context.. ---> Microsoft.Office.SecureStoreService.Server.SecureStoreServiceException: Unable to obtain the application proxy for the context.

at Microsoft.Office.SecureStoreService.Server.SecureStoreProvider.get_Proxy()

at Microsoft.Office.SecureStoreService.Server.SecureStoreProvider.GetRestrictedCredentials(String appId)

at Microsoft.SharePoint.BusinessData.Infrastructure.WindowsAuthenticator.ExecuteAfterLogonUser(Object[] args, ISecureStoreProvider ssoProvider, String ssoApplicationId, Boolean useSensitiveSsoCreds)

at Microsoft.SharePoint.BusinessData.Infrastructure.WindowsAuthenticator.ExecuteAfterLogonUser(Object[] args, ISecureStoreProvider ssoProvider, String ssoApplicationId)

at Microsoft.SharePoint.BusinessData.SystemSpecific.Db.DbConnectionManager.GetConnection()

Possible causes:

1. You might be missing an Association between web-application & service applications via the Service applications Proxy Group.

2. You might have in-sufficient permissions to Service applications/Service application proxies for various service accounts .

Resolution:

1. Create a new proxy group with all required all Service applications & then move the required web-applications to use this Proxy Group.

2.  Check & assign the permissions to Service applications/Service application proxies for required service accounts.

Here is a Sample commands to create a Proxy Group via SharePoint Management shell.Note : Although this can be done via UI , but with a Limitation of unable to create name of the proxy group .

============================================================

$GroupName = 'New Custom Service Group'

Remove-SPServiceApplicationProxyGroup -Identity $groupName -Confirm:$false -ErrorAction SilentlyContinue

$newProxyGroup = New-SPServiceApplicationProxyGroup -name $GroupName

$prxy=Get-SPServiceApplicationProxy

Add-SPServiceApplicationProxyGroupMember -identity $newProxyGroup -member $Prxy

=============================================================

Post By: Rajan Kapoor [MSFT]

Disclaimer

By using the following materials or sample code you agree to be bound by the license terms below and the Microsoft Partner Program Agreement the terms of which are incorporated herein by this reference. These license terms are an agreement between Microsoft Corporation (or, if applicable based on where you are located, one of its affiliates) and you. Any materials (other than sample code) we provide to you are for your internal use only. Any sample code is provided for the purpose of illustration only and is not intended to be used in a production environment. We grant you a nonexclusive, royalty-free right to use and modify the sample code and to reproduce and distribute the object code form of the sample code, provided that you agree:  to not use Microsoft's name, logo, or trademarks to market your software product in which the sample code is embedded; (ii) to include a valid copyright notice on your software product in which the sample code is embedded; (iii) to provide on behalf of and for the benefit of your subcontractors a disclaimer of warranties, exclusion of liability for indirect and consequential damages and a reasonable limitation of liability; and (iv) to indemnify, hold harmless, and defend Microsoft, its affiliates and suppliers from and against any third party claims or lawsuits, including attorneys' fees, that arise or result from the use or distribution of the sample.