2561381 - System owner cannot logon after configuring SAML Single Sign-On for SAP Analytics Cloud

System owner cannot logon after changing the default SAP Cloud Identity Authorization to SAML Single Sing-On.

• SAML Single Sing-On configuration has been done using custom SAML user mapping.
• System owner's user details in the users menu cannot be changed directly.

• SAP Analytics Cloud 2017.20.02
• SAML Single Sign-On

1. Enable SAML Single Sing-On (SSO)
• In step 3, use "Custom SAML User Mapping".
2. After the successful configuration, logon to the system using your custom IdP and the user which has been used for the configuration.
3. Go to "Security" >> "Users".
4. Change the "SAML User Mapping" for all the users.
5. Notice that it cannot be changed for the system owner.

This is a limitation. System Owner's user properties cannot be directly changed at all.

This feature is currently evaluated by development and product management.

Workaround:

1. Assign the System Owner role to someone else.
• Please check Transferring the System Owner Role for further details.
2. Change "SAML User Mapping" for the original system owner.
3. Transfer the system owner role back to the original system owner.

This Knowledge Base Article, SAP‘s strategy, and possible future developments are subject to change and may be changed by SAP at any time for any reason without notice.
This document is provided without a warranty of any kind, either express or implied, including but not limited to, the implied warranties of merchantability, fitness for a
particular purpose, or non-infringement.

• Help resources and free SAP Analytics Cloud content
• Help portal
• SAP Community (Questions & Answers / Direct Link to ask question / Blogs)
• SAP Community WIKI
• Improvement requests (on the SAP Customer Influence portal)
• Video tutorials 
• Videos by topic areas: (Overview, Models and Connections, Stories, SAP Digital Boardroom, Planning, Collaboration, Administration)
• Training events
• Past event recordings
• New user handbook
• Roadmap
• How to connect to on-premise data
• 2487011 - What information do I need to provide when opening incidents with SAP Analytics Cloud
• Introducing SAP BusinessObjects Cloud: BI and Planning (SAP Press book)

Your feedback is important to help us improve our knowledge base.
Please rate how useful you found this article by using the star rating feature at the beginning of this article.
Thank you.

EPM, SAP Cloud for Planning, sc4p, c4p, cforp, cloudforplanning, Hana Cloud for Planning, EPM-ODS, Cloud for Analytics, C4P, Cloud4Analytics, CloudforAnalytics, Cloud 4 Planning, HCP, C4A, BOC, SAPBusinessObjectsCloud, BusinessObjectsCloud, BOBJ, BOBJcloud, BOCloud., BICloud, BO Cloud, connecting, conecting, conectando, conexão, modelo, SBOC, SAC, SAP BusinessObjects Cloud, Business Objects, SAC, SAP AC, Cloud-Analytics, CloudAnalytics, SAPCloudAnalytics, tenant owner, sso, custom, IdP , KBA , LOD-ANA , SAP Analytics Cloud (SAC) , LOD-ANA-BI , Business Intelligence Functionality, Analytic Models , LOD-ANA-PL , Planning , LOD-ANA-BR , SAC Boardroom , LOD-ANA-PR , SAC Predictive , Product Enhancement