SAP Knowledge Base Article - Preview

2534996 - "Original URL check failed" error with SAML 2.0

Symptom

The following error is observed in the Troubleshooting Wizard trace (1332726) during the SP‑initiated SAML 2.0 authentication flow

Service Provider has received SAML2Response from Identity Provider [***] whose Original URL check failed. Reason: The requested application [***] does not correspond to the Original URL from the cookie [***]

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."


Read more...

Environment

SAP NetWeaver Application Server Java

Product

SAP NetWeaver 7.3 ; SAP NetWeaver 7.4 ; SAP NetWeaver 7.5 ; SAP S/4HANA all versions

Keywords

SAML2, RelayState, AssertionConsumerServiceURL, AssertionConsumerService, Application URL , KBA , BC-JAS-SEC-SML , JAVA SAML 1.1 and 2.0 , Known Error

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.