SAP Knowledge Base Article - Preview

2661988 - SAML2.0: Destination from Response <URL> must match the actual URL where message was sent

Symptom

Authentication using SAML2.0 to the NetWeaver ABAP fails when using a reverse proxy (web dispatcher) and the following errors appears in the SAML trace collected with the Security Diagnostic tool:

Destination from Response <URL> must match the actual URL where message was sentMessage 'Response' did not arrive at the correct destination.
Long text: Message 'Response' did not arrive at the correct destination.


Read more...

Environment

  • SAP enhancement package 2 for SAP NetWeaver 7.0
  • SAP NetWeaver 7.3
  • SAP enhancement package 1 for SAP NetWeaver 7.3
  • SAP NetWeaver 7.4
  • SAP NetWeaver 7.5 and higher

Product

SAP NetWeaver 7.3 ; SAP NetWeaver 7.4 ; SAP NetWeaver 7.5 ; SAP enhancement package 1 for SAP NetWeaver 7.3 ; SAP enhancement package 2 for SAP NetWeaver 7.0

Keywords

KBA , BC-SEC-LGN-SML , SAML 2.0 for ABAP , CA-FE-FLP-EU , Please use CA-FLP-FE-UI , CA-UI2-INT-FE , Please use CA-FLP-FE-COR , CA-UI2-INT-BE , Please use CA-FLP-ABA , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.