SAP Knowledge Base Article - Preview

3229323 - Corporate IdP OKTA: Identity provider cannot process the response due to wrong configuration

Symptom

A new Service Provider SP was purchased (for example S/4HANA Cloud).

In SP-initiated scenario, where the corporate IdP is Okta and Identity Authentication Service (IAS) acts as the proxy, the following error can be seen when trying to authenticate on Okta and access the Service Provider (SP):

Error : Identity provider cannot process the response due to wrong configuration. Please contact your system administrator. 

Meanwhile in the troubleshooting log the following entries are visible.:

Failed to create SAML error responseConfiguration for trusted SP [null] does not exist.
SAML validation error.HTTP request contains no cookies.
Failed to forward to error page.Cannot forward after response has been committed Id
Failed to send response.response parameter is null.

In the OKTA the "Requestable SSO URLs" has such entry:

https://<tenantid>.accounts.ondemand.com/saml2/idp/acs/<tenantid>.accounts.ondemand.com



but in SAML trace the

Destination="https://<tenantid>.accounts.cloud.sap/saml2/idp/sso/<tenantid>.accounts.ondemand.com"

is visible
where the issuer is the Service Provider:

Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://myxxxxx.s4hana.cloud.sap</saml:Issuer>



Read more...

Environment

Identity Authentication 

Product

Identity Authentication 1.0 ; SAP S/4HANA Cloud 2202

Keywords

troubleshooting log
Failed to create SAML error responseConfiguration for trusted SP [null] does not exist.
SAML validation error.HTTP request contains no cookies.
Failed to forward to error page.Cannot forward after response has been committed Id
Failed to send response.response parameter is null. , KBA , BC-IAM-IDS , Identity Authentication Service , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.