Re: Endpoint URL issue in SAML2 and ADFS integration on Portal 7.3
Hi Did you check the "RelayState"? Your SAML IDP provider should setup RelayState and then you have to configure same in SP with targeting URL. Thank you Santosh Lad
View ArticleSAP Password Manager with SAP BCM CDT (contact center client)
Hey all, We're testing the SAP Password Manager 2.0 SP3 (latest version out there).It works OK....but now it seems we have a conflict/problem if the SAP Password Manager is running BEFORE our users...
View ArticleRe: PSE can't be Created in SSO
Hi I am having same issue. Any suggestion? Thanks you in advance. Santosh Lad
View ArticleRe: Endpoint URL issue in SAML2 and ADFS integration on Portal 7.3
Hi We are getting error in configuring relaystate only. In configuring relay state we need to give metadata.xml and the endpoint are getting picked from there only.
View ArticleRe: Endpoint URL issue in SAML2 and ADFS integration on Portal 7.3
Hello Atul, As far as I remember ADFS does not allow to add a relying party that has endpoint URLs with http protocol. Using https only is recommended by the SAML 2.0 stadard. We allow http access only...
View ArticleRe: Endpoint URL issue in SAML2 and ADFS integration on Portal 7.3
Hello Dimitar Instead of making changes on ADFS side, I was looking for some workaround on SAP Portal side.Maybe getting redirected from HTTPS to HTTP URL if possible somehow. ThanksAtul Shrivastava
View ArticleRe: Endpoint URL issue in SAML2 and ADFS integration on Portal 7.3
Hi, This won't work because the SAML 2.0 messages contain the destination URL to which they have to be delivered. This is in order to prevent man-in-the-middle attacks. If you do the redirect from...
View ArticleRe: SAP Password Manager with SAP BCM CDT (contact center client)
Hi Nick, I'm happy to hear that Password Manager helps you fill the gaps and works well for your non-SAP applications. This is exactly the scope that we build this tool for, to cover scenarios that...
View ArticleRe: X.509 client certificate not working through Reverse proxy
Hi all, just for reference: we had a similar problem using F5's BIG-IP Web Application Firewall as reverse proxy. We did not get this working (not sure if SAP's or F5's fault) and opted for some rather...
View ArticleRe: SAP Password Manager with SAP BCM CDT (contact center client)
Hey Christian, thanks for the response. Yeah, I put a message in yesterday, right after I created this thread. I guess we'll see. NICK
View ArticleSecure Login Client Login Popup Window Issue
Hi, We are in process of testing SSO for SAP Local GUI using X.509 certificate. SSO as such is working fine but having issue with the Secure Login Client - Login popup screen. Even if I don't enter my...
View ArticleSAP WebGui SSO - Select a certificate
Hi, I am receiving the Windows Security popup and asking to select a certificate while testing SSO on SAP WebGui. SSO is working fine but is there a way to make a default selection for the certificate...
View ArticleRe: GSS-API(maj) SAP SSO btw SAP on linux and MAD
Thanks Vale,I performed as it was guided by you, changed the SSO 1.0 to SSO2.0SP3 , I kept the parameter snc/gssapi_lib to CommonCryptolib ...kudos that did help...I was able to bring my system up...
View ArticleRe: GSS-API(maj) SAP SSO btw SAP on linux and MAD
The scenario is i generated the SAPSCNCKERB.pse file from /DVE/SLL which got created in /DVE/sec directory....when i fire the sapgenpse keytab command i create 1 SSO credential for my user...
View ArticleRe: Secure Login Client Login Popup Window Issue
Hello, it seems that you have configured a SPNEGO authentication profile. This requires normally no user interaction.Do you have configured "Show Success Message" in the Secure Login Server...
View ArticleRe: SAP WebGui SSO - Select a certificate
Hello, you have two certificates in your user certificate store which fits the trusted Roots configured in your ABAP SSL configuration.I do not know if this is your intent that both user certificates...
View ArticleRe: Secure Login Client Login Popup Window Issue
Hi Alexander, Thanks for your reply. I switched off "Show Success Message" but I am still getting the prompt for user id/password. After switching it off I don't get the Authentication process complete...
View ArticleRe: SAML 2.0 authenticatication and Fiori
Hi Bill,Did you find the solution? I have a similar error. My guess is some claim attribute missing from IdP? Probably the relaytstate was not defined properly. Regards,Subhra
View ArticleRe: Secure Login Client Login Popup Window Issue
Hello, Could you please check, if the policy configuration on the Secure Login Server for this Windows Authentication (SPNEGO) profile contains other login modules as the SPNegoLoginModule.You can...
View ArticleRe: GSS-API(maj) SAP SSO btw SAP on linux and MAD
Hi Amit, The Secur Login Client could not get a ticket from the Service Account configured. Normally you muss configure the SPN of your Service Account on your Client workstation as Server SNC Name in...
View Article