Symptom
SAML 2.0 authentication fails with exception like the followings in trace which can be collected with the KBA 2960670:
CX_SAML20_CORE: Parameter 1- was either incorrectly set or not set in method CONVERT_NAMEID.
Long text: Parameter 1- was either incorrectly set or not set in method CONVERT_NAMEID. at CL_SAML20_ENTITY->CONVERT_NAMEID(Line 14)
at CL_SAML20_FEDERATION->GET_SAP_USER_ID_FROM_USREXTID(Line 36)
at CL_SAML20_FEDERATION->CREATE_INSTANCE(Line 297)
at CL_SAML20_RESPONSE->VALIDATE_ASSERTION(Line 81) ....
or like this:
Caused by: CX_SAML20_CORE: Parameter was either incorrectly set or not set in method CONVERT_NAMEID at CL_SAML20_ENTITY->CONVERT_NAMEID(Line 32)
at CL_SAML20_ASSERTION->VALIDATE_SUBJECT_SSO(Line 130)
at CL_SAML20_ASSERTION->VALIDATE_ASSERTION(Line 27) ...
Read more...
Environment
- SAP Netweaver AS ABAP 7.02
- SAP Netweaver AS ABAP 7.30
- SAP Netweaver AS ABAP 7.31
- SAP Netweaver AS ABAP 7.40
- SAP Netweaver AS ABAP 7.50 and higher
Product
Keywords
SAML2, SAML 2.0, SAML, IdP, CONVERT_NAMEID, GET_SAP_USER_ID_FROM_USREXTID, CREATE_INSTANCE, VALIDATE_ASSERTION , KBA , BC-SEC-LGN-SML , SAML 2.0 for ABAP , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.