SAP Knowledge Base Article - Public

2590755 - Is IdP-initiated SSO method supported in SAP Analytics Cloud?

Symptom

  • You configured your custom SAML Identity Provider according to the product's documentation in SAP Analytics Cloud (SAC).
  • You want to deploy the application directly in your SAML IdP "launchpad" (IdP initiated).
  • Service Provided initiate works as expected.
  • You connect to SAP Analytics Cloud and are redirected correctly to your SAML Identity Provider.

Environment

  • SAP Analytics Cloud
  • Custom SAML 2.0 Identity Provider

Reproducing the Issue

  1. Access IdP Login Portal / Homepage
  2. Access SAP Analytics Cloud Application
  3. Observe "HTTP 400 - Bad Request" error when redirected to authn.<region>.hana.ondemand URL 

Resolution

  • You can configure IdP initiated SSO for SAC systems running on SAP Data Centers only.
  • You can also choose SAP Analytics Cloud log-off behavior, to log off from your IdP or only SAP Analytics Cloud and remain logged in to your IdP.

See Also

Your feedback is important to help us improve our knowledge base.

Keywords

SAML, initiate, sp initiated, initiated, Idp, SBOC, SAC, SAP BusinessObjects Cloud, Business Objects, SAC, SAP AC, Cloud-Analytics, CloudAnalytics, SAPCloudAnalytics, IdP-initiated, sso single sign on, singlesignon, single-sign-on , KBA , LOD-ANA-AUT , SAC Authentication / Login , LOD-ANA-BI , Business Intelligence Functionality, Analytic Models , LOD-ANA-PL , Planning , LOD-ANA-BR , SAC Boardroom , LOD-ANA-PR , SAC Predictive , How To

Product

SAP Analytics Cloud 1.0