Symptom
Failed to connect to system with SAML SSO connection to SAP HANA in SAP Analytics Cloud (SAC).
Environment
- SAP Analytics Cloud
- SAP HANA
- Security Assertion Markup Language (SAML)
Reproducing the Issue
- Successfully configure SAP Analytics Cloud to use SAML Authentication
- Configure SAML on SAP HANA using the SAP Analytics Cloud metadata
- Authenticate to SAP HANA in your browser session
- In the same browser session, create a Live Data Connection to SAP HANA in SAP Analytics Cloud that uses SAML SSO
- Close your browser
- Connect to SAP Analytics Cloud
- Notice the error
Cause
SAP Analytics Cloud is a SAML Service Provider and not a SAML Identity Provider
Resolution
Configure SAP HANA to use the SAML Identity Provider you configured for SAP Analytics Cloud by following section "Maintaining SAML Providers" of SAP HANA Administration Guide
High level steps are:
- Export the SAP HANA SAML Service Provider metadata using XS Admin SAML Service Provider at http://<HANAHOST>:<HANAXSPORT>/sap/hana/xs/admin/#/samlSP on the Metadata tab
- Import SAP HANA SAML Service Provider metadata into SAML Identity Provider (ADFS, etc)
- Configure SAML Identity Provider (ADFS Claim Rule, etc) for SAP HANA
- Export SAML Identity Provider metadata (ADFS, etc)
- Import SAML Identity Provider metadata into SAP HANA using XS Admin SAML Identity Provider at http://<HANAHOST>:<HANAXSPORT>/sap/hana/xs/admin/#/samlIDP/0
- Configure SAP HANA users to use SAML and specify the Identity Provider using SAP HANA Studio or http://<HANAHOST>:<HANAXSPORT>/sap/hana/ide/security/
- Add SAML authentication with the correct Identity Provider to /sap/bc/ina/service/v2 using XS Admin XS Artifact Administration at http://<HANAHOST>:<HANAXSPORT>/sap/hana/xs/admin/#/package/sap.bc.ina.service.v2
See Also
- 2761068 - Error: Login fails with StatusCode in ResponseMessage != OK; please refer to the database trace for more information in SAP Analytics Cloud (SAC)
- SAP Analytics Cloud > Learning > Guided Playlists > User Management With a SAML Identity Provider (IDP)
- 2487567 - Troubleshooting SAML assertions when configuring SAML SSO in SAP Analytics Cloud
- SAML authentication in SAP Analytics Cloud blog
- 2569847 - Where can you find SAC user assistance (help) to use, configure, and operate it more effectively?
- Have a question? Ask it here and let our amazing SAP community help! Or reply and share your knowledge!
- 2487011 - What information do I need to provide when opening an case for SAP Analytics Cloud?
- SAP Analytics Cloud > Learning > Guided Playlists
- SAP Analytics Cloud > Learning > Guided Playlists > Getting Support
- Need More Help? Contact Support or visit the solution finder today!
Your feedback is important to help us improve our knowledge base.
Keywords
EPM, SAP Cloud for Planning, sc4p, c4p, cforp, cloudforplanning, Hana Cloud for Planning, EPM-ODS, Cloud for Analytics, C4P, Cloud4Analytics, CloudforAnalytics, Cloud 4 Planning, HCP, C4A, BOC, SAPBusinessObjectsCloud, BusinessObjectsCloud, BOBJ, BOBJcloud, BOCloud., BICloud, BO Cloud, connecting, conecting, conectando, conexão, modelo, SBOC, SAC, SAP BusinessObjects Cloud, Business Objects, SAC, SAP AC, Cloud-Analytics, CloudAnalytics, SAPCloudAnalytics, SSO, SAML, Failed, Connect, System, Identity, Login Error - Fail to login to SAP Analytics Cloud , KBA , LOD-ANA , SAP Analytics Cloud (SAC) , LOD-ANA-BI , Business Intelligence Functionality, Analytic Models , LOD-ANA-PL , Planning , LOD-ANA-BR , SAC Boardroom , LOD-ANA-PR , SAC Predictive , Problem