title: SAP gateway unauthorized when trying to get a csrf token
body: <p>SAP gateway we are getting 403 unauthorized when trying to get a csrf token.</p>
  
  <p>The same username / password is working for read operations.</p>
  
  <p>I've looked at some other posts in the sap forums and also posted there:
  <a href="https://answers.sap.com/questions/715798/sap-gateway-unauthorized-when-trying-to-get-a-csrf.html" rel="nofollow noreferrer">https://answers.sap.com/questions/715798/sap-gateway-unauthorized-when-trying-to-get-a-csrf.html</a></p>
  
  <p>We are using http, but we have the login/ticket_only_by_https set to 0.</p>
  
  <p>I also looked at the service and did not see the parameter ~CHECK_CSRF_TOKEN = 0 as described at: <a href="https://archive.sap.com/discussions/thread/3723417" rel="nofollow noreferrer">https://archive.sap.com/discussions/thread/3723417</a></p>
  
  <p>The parameters list came up as blank.</p>
  
  <p>Any other ideas?</p>
  
  <p>I wrote a small c# program to just try to get the csrf token and it works against our test system but it is failing on a customer's system. I haven't been able to figure out why.</p>