Implement the latest version of SAP Note 2985521 -Collective corrections as of ST-PI 7.40 SP14 for Cloud ALM
Check that profile parameter icm/HTTPS/client_sni_enabled is set to TRUE (see also note 510007 - Additional considerations for setting up SSL on Application Server ABAP)
Required Authorizations
To run transaction /SDF/ALM_SETUP you need the PFCG role SAP_SDF_ALM_SETUP
The user you specify as Background User, requires the PFCG role SAP_SDF_ALM_COLLECTORS_JOBS