/support/notes/service/sap_logo.png){kind=logo}
SAP Knowledge Base Article - PublicSymptom
- IAS is enabled in the instance
- When adding a new SAML asserting party in the SSO Settings in Provisioning, you encounter error "You cannot enable more than one SAML assertion party when Identity Authentication Service is enabled"
Environment
- SAP SuccessFactors HXM Suite
- SAP Cloud Platform Identity Authentication Service
Reproducing the Issue
- Go to SSO Settings in Provisioning
- There is already an IAS SSO settings enabled
- Add a new SAML Asserting Party in the SSO Settings > Fill out the details > Click "Add An Asserting Party"
- Error "You cannot enable more than one SAML assertion party when Identity Authentication Service is enabled" appears
Cause
This is expected behavior
Resolution
There was patch released last August 14, 2020 by Engineering team that would show the error "You cannot enable more than one SAML assertion party when Identity Authentication Service is enabled" when adding a new SAML Asserting Party if the IAS is enabled.
The system allows only one SAML assertion party to be enabled after the upgrading to IAS and enabling IAS.
So, if the provisioning flag for IAS is enabled, adding more than one assertion party to be enabled is not allowed. Another assertion party can be added, but cannot be enabled. If the IAS flag is disabled, more than one assertion parties can be enabled.
Workaround:
- Add the new SAML Asserting Party to the IAS tenant via following:
2674264 - Configuring SSO between Corporate IDP, IAS Tenant and SuccessFactors When Using IAS as Proxy to Corporate
See Also
Keywords
IAS, error, sso settings, sso, single sign on, corporate idp, idp, saml, asserting party, You cannot enable more than one SAML assertion party when Identity Authentication Service is enabled, provisioning , KBA , LOD-SF-PLT-IAS , Identity Authentication Services (IAS) With BizX , LOD-SF-PLT-SAM , SAML SSO First Time Setup , LOD-SF-PLT-IRT , Instance Refresh Tool , Problem