Symptom
You have configured your AS JAVA System to be the Service Provider in a SAML Communication but this SSO is failing, in the Troubleshooting wizard trace file we can see the below error:
Could not extract SAML2 message from request.
[EXCEPTION]
java.lang.SecurityException: com.sap.security.saml2.lib.common.SAML2Exception: Failed to Base64 decode the given value: xxxxx
.....
Caused by: java.lang.ArrayIndexOutOfBoundsException: while trying to store to index xxxxx of a byte (or boolean) array with length xxxxx , loaded from local variable 'decoded'
at com.sap.engine.lib.xml.util.BASE64Decoder.decode(BASE64Decoder.java:403)
at com.sap.security.saml2.lib.common.SAML2Utils.decodeBase64(SAML2Utils.java:298)
.....
Service Provider could not extract SAML2 message from request. Reason: com.sap.security.saml2.lib.common.SAML2Exception: Failed to Base64 decode the given value:
LOGIN.FAILED
User: xxxxxx
IP Address: xxxxxx
.....
Login Module Flag Initialize Login Commit Abort Details
1. com.sap.security.core.server.jaas.EvaluateTicketLoginModule SUFFICIENT ok exception true
2. com.sap.security.saml2.sp.SAML2LoginModule OPTIONAL ok exception true Service Provider could not extract SAML2 message from request.
3. com.sap.security.core.server.jaas.CreateTicketLoginModule SUFFICIENT ok false true
4. com.sap.engine.services.security.server.jaas.BasicPasswordLoginModule REQUISITE ok false false
5. com.sap.security.core.server.jaas.CreateTicketLoginModule REQUISITE ok false true
No logon policy was applied
Read more...
Environment
- Release Independent
- SAP NetWeaver
Product
Keywords
SAML Response, Failed to Base64 decode the given value, Base64, Decode, Decoding, Service Provider could not extract SAML2 message from request, Service Provider, extract SAML2, SAML2 , KBA , BC-JAS-SEC-SML , JAVA SAML 1.1 and 2.0 , BC-JAS-SEC-LGN , Logon, SSO , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.
SAP Knowledge Base Article - Preview