Unable to fetch X-CSRF-Token when using SAP Kapsel Logon with Security Configuration "FORM"

[Former Member]

Request for X-CSRF-Token :

URL: https://hcpms-p19416*****trial.hanatrial.ondemand.com/com.***.credithold/

Type: GET

Headers

     X-CSRF_Token: Fetch
     X-SMP-APPCID : ***********

     charset : UTF-8
     Content-Type : application/atom+xml

Fetched X-CSRF_Token successfully for application connection Id(HCPms option Security Configuration  "None")

But unable to get X-CSRF-Token for application Connection Id (HCPms option Security Configuration "Form")

[Jitendra_Kansal]

Can you reproduce it with below steps:

1. First run this url in the browser: https://hcpms-pxxxtrial.hanatrial.ondemand.com/odata/applications/latest/com.mycompany.logon/Connect...

it should redirect to identity provider, enter SCN id and password (should get 501 error message)

2. Do a post request in rest client > should get 201 message

3. Now, make a GET call as you did in 1st screenshot

Regards,

JK

[Former Member]

Hi Jitendra,

Tried to reproduce the above mentioned steps

1. First run this url in the browser: https://hcpms-pxxxtrial.hanatrial.ondemand.com/odata/applications/latest/com.mycompany.logon/Connect...

Response

It redirected to identity provider, entered SCN id and password got 501 error message

2. Do a post request in rest client > should get 201 message

Response

Without  "Content-Type" got Error 415 "Unsupported Media Type"

With "ContentType": application/atom+xml got 500 "Internal Server Error"

3. Now, make a GET call as you did in 1st screenshot

Didn't get any response,showing empty

Thanks,

Sudheer

[Former Member]

Got CSRF-Token with SAML authentication in Fiori App.

Thanks for the reply

[Jitendra_Kansal]

Good to know you got CSRF-Token value. You can close this thread if your query has been resolved.

Regards,

JK