SAP Knowledge Base Article - Preview

2726471 - HTTP Status 500 - Service Provider does not match specified audience in the SAML2Assertion - SAP Cloud Platform NEO Environment

Symptom

Application can not be accessed in SAP Cloud Platform, Neo environment using a custom Application Identity Provider.

  • The following error can be seen in the screen:
     
    HTTP Status 500 - An internal application error occurred
      
  • Application log shows the following:
      
    #ERROR#Authentication failed. Reason: Service Provider does not match specified audience in the SAML2Assertion.
     
  • SAML trace (as per KBA: 2461862 - Collecting SAML traces with Chrome or FireFox) contains the following request:
      
    [...]
    "request_method": "POST",
    [...]
    "response_status": 500,
    [...]
    "saml": <...>
    [...]


Read more...

Environment

SAP Cloud Platform, Neo Environment

Product

SAP Business Technology Platform all versions

Keywords

NEO security, Cloud security, corporate Identity Provider, corporate IDP, application identity provider, Service Provider does not match specified audience in the SAML2Assertion, http 500, 500 internal application error, scp , KBA , BC-NEO-SEC-IAM , Authentication, Authorization(Cloud Platform Neo) , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.