SP 2013 Workflow is Canceled State with the following error:

RequestorId: d08295d5-75f5-547a-f676-7217f1489791. Details: System.ApplicationException: HTTP 401 {"error_description":"The server was unable to process the request due to an internal error. For more information about the error, either turn on IncludeExceptionDetailInFaults (either from ServiceBehaviorAttribute or from the <serviceDebug> configuration behavior) on the server in order to send the exception information back to the client, or turn on tracing as per the Microsoft .NET Framework SDK documentation and inspect the server trace logs."} {"x-ms-diagnostics":["3001000;reason=\"There has been an error authenticating the request.\";category=\"invalid_client\""],"SPRequestGuid":["01276eb2-0161-4ec0-8754-fb70c8d54ecb"],"request-id":["01276eb2-0161-4ec0-8754-fb70c8d54ecb"],"X-FRAME-OPTIONS":["SAMEORIGIN"],"SPRequestDuration":["24"],"SPIisLatency":["0"],"Server":["Microsoft-IIS\/8.0"],"WWW-Authenticate":["Bearer realm=\"684555f0-cd9f-427f-b401-71f61c14a85a\",client_id=\"00000003-0000-0ff1-ce00-000000000000\",trusted_issuers=\"00000005-0000-0000-c000-000000000000@*,00000003-0000-0ff1-ce00-000000000000@684555f0-cd9f-427f-b401-71f61c14a85a\"","NTLM"],"X-Powered-By":["ASP.NET"],"MicrosoftSharePointTeamServices":["15.0.0.4505"],"X-Content-Type-Options":["nosniff"],"X-MS-InvokeApp":["1; RequireReadOnly"],"Date":["Thu, 02 Jan 2014 06:17:46 GMT"]} at Microsoft.Activities.Hosting.Runtime.Subroutine.SubroutineChild.Execute(CodeActivityContext context) at System.Activities.CodeActivity.InternalExecute(ActivityInstance instance, ActivityExecutor executor, BookmarkManager bookmarkManager) at System.Activities.Runtime.ActivityExecutor.ExecuteActivityWorkItem.ExecuteBody(ActivityExecutor executor, BookmarkManager bookmarkManager, Location resultLocation)

When i check the uls log i found the following error:

General Event ID: ajji6 - Unable to write SPDistributedCache call usage entry.

User Profiles Event ID: ae0s1 - Identity claims mapped to '0' user profiles. Claims: [nameid: '', nii: 'windows', upn: '', smtp: '', sip: ''], User Profiles:

User Profiles Event ID: ae0sr - UserProfileException caught.. Exception Microsoft.Office.Server.Security.UserProfileNoUserFoundException: 3001002;reason=The incoming identity is not mapped to any user profile account in SharePoint. Possible cause is that no user profiles are created in user profile database. Contact your administrator.    
 at Microsoft.Office.Server.Security.UserProfileIdentityClaimMapper.GetSingleUserProfileFromClaimsList(UserProfileManager upManager, IEnumerable`1 identityClaims)    
 at Microsoft.Office.Server.Security.UserProfileIdentityClaimMapper.<>c__DisplayClass2.<GetMappedIdentityClaim>b__0() is thrown.

Do you have User Profiles setup?  If so, do all actors in the workflow have email addresses setup?

You are getting HTTP 401. It looks like the user account with which the workflow is running does not have enough rights. Please check that.

If you are kicking off the workflow while logged in as the farm admin account, try initiating it as a different account.

Hi Jeff ,

For troubleshooting  your issue, please take steps as below:

1.Make sure User profile synchronization is started.

2.Make sure the user is not the SharePoint system user.

3.Make sure the user by whom you are logged is available in User Profile list.

4.Step full synchronization of User Profile Application.

Reference: SharePoint 2013 Quick Tips: Workflow And The User Profile Service

Hope this helps!

Best Regards,

Eric

Thank you all for the reply, i tried all suggested answers even after posting this question here and it just didn't work.

I even came up with the solution of creating an event receiver with impersonated token, to start the workflow but the issue is still the same, but when i use the same account to start the workflow manually it works fine.??

I am having same type of issue.

I believe the Workflow manager as an app is authenticating under the logged in user who is acting on the workflow via SharePoint. And so the logged in user is not being authenticated or the user's security token from the STS service and User profile service is not being issued.

To resolve would be to recycle the security token service application. However, I am looking for root cause to prevent.

Hi Roy Kim,

I am facing the same issue. Did you get a solution or how to prevent it?

Regards

Sakti

Hi,

Does anyone have a solution for this problem? I'm experiencing the same thing. I had this issue before on a test environment and after a while it worked without changing anything.

Now I have the same issue on a production environment.

Kind regards

Sen

Sen,

Was the test environment eventually patched / running a newer version of either App Fabric or SP 2013? In other words, did a patch resolve the issue and maybe you did not notice? I am having a similar issue. I also wonder if there is a permission missing on my UPS that is preventing STS or other from reading data from UPS.

No, there was no patch installed on the servers. The errors keeps coming and going. I have already had it 3 or 4 times on different environments, it always resolves itself after a while.