2182018 - Information required for initial analysis of SAML2.0 problems in SAP AS Java

You are experiencing a Single Sign-On (SSO) problem with the SAP AS Java SAML 2.0 authentication mechanism. To speed up the analysis and find the solution in an efficient way, it is important to have a clear understanding of the problem including the system landscape, detailed replicate steps, configuration details and relevant traces.

The intention of this KBA is to help you collect the essential information for troubleshooting of SAP AS Java SAML2.0. It is the extention of SAP Note:1468217.

SAML 2.0 Service Provider

• NetWeaver AS Java 7.20, 7.30, 7.31 and 7.40
• NetWeaver AS ABAP 7.02, 7.30, 7.31 and 7.40

SAML 2.0 Identity Provider

• Part of NetWeaver Single Sign-On product
• IDMFEDERATION SCA have to be installed on top of NetWeaver AS Java 7.20, 7.30, 7.31 or 7.40
• Due to historical reasons IDMFEDERATION SCA is also part of SAP Identity Management 7.2

JavaEE AS Java SAML2.0 Troubleshooting troubleshooting errors trace log debug IDP SP Idp , KBA , BC-JAS-SEC-LGN , Logon, SSO , How To