spnego/snc and saml

[Former Member]

Hii, Is there a relation between spnego/enable parameter and SAML? My iDP and SP configuration is done and working well. Soon as the spnego/enable parameter is enabled in the backend ABAP system, the SAML SSO breaks. Any help? Thanks

[former_member202592]

Hi Jim,

Are you using Kerberos with SAML 2.0?

Directly there is no relation between SAML 2.0 authentication and Kerberos/SPNego, only if you are using both for single sign-on.

Make sure that the correct SAML 2.0 authentication context is configured. Are you performing a password based authentication with SAML 2.0 or single sign-on?

Cheers,

Filipe Santos

[Former Member]

I am using SAML 2 with SAP Single Sign-on. My iDP is SAP SSO and my SP is an ABAP system.

Yes, I am using Kerberos based SSO.

When I enable spnego, the iDP does not pass the authentication to my SP anymore. My SAPGUI SSO works.

Thank you!

[former_member202592]

Hi Jim,

It seems that your SPNego configuration was not properly done.

The Kerberos single sign-on configuration for SAPGUI and for HTML-based applications is different, thus even though is working for SAP GUI this does not mean that will be working for web based applications.

If you are using the SAP Single Sign-On product, please refer to the section 4.5.5 of the Secure Login Implementation Guide.

SAP SSO 2.0: http://help.sap.com/download/sapsso/secure_login_impl_guide_en.pdf

SAP SSO 3.0: http://help.sap.com/download/sapsso30/secure_login_impl_guide_en.pdf

Cheers,

Filipe Santos