2259979 - SAML 2.0 prompts for username and password: Service Provider does not support Name ID Format

Symptom

The authentication using the Security Assertion Markup Language (SAML) 2.0 fails prompting the user to enter the user and password. The following error message is recorded in the traces:

Service Provider does not support Name ID Format [urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified] for trusted Identity Provider [xxxx.xxxxx.xxxxxx].

Similar than:

Environment

SAML 2.0 Service Provider

NetWeaver Application Server Java
NetWeaver Application Server ABAP

SAML 2.0 Identity Provider

Part of NetWeaver Single Sign-On product
IDMFEDERATION SCA have to be installed on top of NetWeaver AS Java
Due to historical reasons IDMFEDERATION SCA is also part of SAP Identity Management

Product

SAP Identity Management 8.0 ; SAP NetWeaver 7.3 ; SAP NetWeaver 7.4 ; SAP NetWeaver 7.5 ; SAP NetWeaver Application Server for Java 7.2 ; SAP NetWeaver Identity Management 7.2 ; SAP enhancement package 1 for SAP NetWeaver 7.3

Keywords

saml, login, module, authentication, stack, JavaEE, AS Java, SAML2.0, Troubleshooting, troubleshooting, wizard, errors, trace, log, debug, IDP, SP, Idp, SAMLResponse, Trusted, Providers, Name, Identifier, Name, ID, Format, oasis, urn:oasis:names:tc:SAML:1.1:nameid-format, Service Provider does not support Name ID Format , KBA , BC-JAS-SEC-AUT , ACLs, J2EE Roles, UME Actions , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.