SAP Knowledge Base Article - Preview

2838814 - The audience restriction XXX doesn't match the expected audience restriction

Symptom

Configured SAML 2.0 logon fails and errors similar to below are recorded:
****************************************************************************************************************************
Warning saml2.sp.ResponseValidationService SAML2Assertion validation failed. [EXCEPTION]
The audience restriction XXX doesn't match the expected audience restriction urn:componentspace: <IDP>.
****************************************************************************************************************************


Read more...

Environment

  • SAP NetWeaver Application Server
  • SAP Cloud Platform Identity Authentication Service
  • Release Independent

Product

SAP Business Technology Platform all versions ; SAP Cloud Identity Services all versions ; SAP Composition Environment all versions ; SAP NetWeaver Application Server all versions ; SAP NetWeaver Application Server for Java all versions ; SAP NetWeaver all versions ; SAP Process Integration all versions ; SAP Solution Manager all versions

Keywords

sso single-sign-on login.failed artifact JAVA Service Provider SP Identity Provider IDP Issue Instant is not valid SAP Production ABAP R/3 ERP SRM CRM ERP PPM SEM APO XI PI PORTAL Test development QA SAML 2.0 SAML2Assertion Warning saml2.sp.ResponseValidationService SAML2Assertion Service Provider SAMLREQUEST
, KBA , BC-JAS-SEC-SML , JAVA SAML 1.1 and 2.0 , BC-JAS-SEC , Security, User Management , BC-IAM-IDS , Identity Authentication Service , BC-SEC-LGN-SML , SAML 2.0 for ABAP , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.