NW 7.4 ABAP IdP initiated SSO only required

[Former Member]

Hi all,

I have NW 7.4 SP6 gateway. In saml2 tcode I configured gateway system as services provider. I also created trusted provider (compny has commercial IdP) by importing metadata, Sp metadata was sent to IdP support team

We need IdP initiated SSO only. But when testing direct link to gateway application I'm still being sent to IdP link to authenticate before proceeding, it looks like SP-initiated SSO is also activated and I don't know how to disable it. In 7.3 java there were radio buttons "Supported SSO types" as "SP initiated" and "IdP initiated", and now I don't see those

this is ABAP

I studies the link http://scn.sap.com/thread/3497854 and seemingly I'm doing everything correctly, but it still does not work as expected

any thought/information please?

thanks in advance,

regards, Elena

[martin_voros]

Hi,

the post mentioned by you has a link for SAML2 trace app (more info here). Any results from there?

Cheers

[Former Member]

Hi Martin, thanks

yes, I ran the trace and I see saml token is created, my test user ID mapped correctly, but at the end I see strange message:

<Testuser1> " SAML20 SP (client 010 😞 Current request method is POST, request method as read by OUC cookie is     . Request URL from OUC cookie:    . Form fields from OUC cookie:    "

and then

<No user> "SAML20 SP (client 010 😞 SAML2 session exist in client: 010, no policy specified "

so SSO does not work a all - either way

thanks

[martin_voros]

Hi,

I can see where that trace is being created. The issue seems to be that you have blank values there. Could you activate security audit (transaction SM19) for this user and see what gets logged there. I can see that code write to security audit log and you might get more meaningful message there. Also do you see in trace message that starts with " IdP initiated SSO"? From brief look at code your message gets written to trace after user was successfully authenticated.

Cheers

[Former Member]

Hi Elena,

How did you resolve this issue?

Regards,