Web app using SAML on AS JAVA getting a browser certificate selection popup

[Former Member]

Hi,

We have configured a Java web app to use SAML2 authentication via ADFS. The authentication is working fine except some users are getting a 'select certificate' popup. If they select cancel the SAML authentication continues successfully.

We only have SAML2 and Basic logon modules configured for the web app.

Any ideas why the certificate popup is invoked and how to prevent/suppress it?

Thanks

JB

[kuhnen · Accepted solution]

Hi,

like Carsten said "you can specify the server's behaviour regarding the use of certificates of client authentication".

Another way to do this is to go to SSL Config in AS java

Go to SSL Configuration AS Java and change your SSL Access Points accordingly. You can specify the client authentication modus to not required. This should avoid the browser to ask for a certificate.

Regards,

Marcus

[Former Member · Accepted solution]

Thanks Carsten and Marcus. The change resolved the issue.

[Colt]

Hi John,

i assume your ICM configuration (SSL access point) in AS Java is configured to accept SSL Client certificates. You can specify the server's behavior regarding the use of certificates for client authentication by configuring the VCLIENT option accordingly.

icm/server_port_<xx> = PROT=<protocol>, PORT=5$(SAPSYSTEM)01[, VCLIENT=<0,1,2>

Set VCLIENT=0 and the server should not ask for one. More info here

Regards,

Carsten

[former_member157391]

Hi JB,

Would you please attach screenshot showing the popup for further check?

It might be helpful to isolate the problem if you could check whether the user facing the issue get the same popup when he/she do in other PC.

Best regards,
Ning