Configuring SAML 2.0 for web services - sender-vouches scenario

[miklos_palfi8]

We would like to configure this scenario using SAML2.0 assertion tickets. We are on ECC 6 EhP6.

Configuration in SAML2 has been completed - no WS security policy has been configured in order to support the sender-vouches scenario.

WSS_SETUP has run to use SAML.

When configuring the web services we are using https for transport and SAML for authentication - the wsdl generated in this case references SAML1.1 and as result we get an error of  Wrong token type received. Endpoint expects SAML 1.1 token.

The question is: can SAML2.0 be used for sender-vouches scenarios or not?

Any input or help would be greatly appreciated.

Thank you,

Miklos

[Former Member]

No. According to SAP note 1254821: "SAML Sender-Vouches is supported for SAML 1.1 Assertions. There is no support for SAML Sender-Vouches with SAML 2.0 Assertion."

Thanks

Bruno

[Former Member]

We are getting this error, but using Holder of Key scenario, which note 1254821 specifies that SAML 2.0 is supported in our version of NW (7.02) ABAP.

The WSS_SETUP tool, however, only specifies 1.1 as an option.