SAP Knowledge Base Article - Public

3428298 - Activate IAS Upgrade - Test Now Error

Symptom

  • Encountered an error when trying to test and run the Activate IAS Upgrade via Upgrade Center 
  • IAS is using a third party IDP. 
  • Collect the SAML trace and it would show that the AssertionConsumerServiceURL is using the *cloud.sap URL instead of the ondemand.com which is what was listed on the tenant settings of the IAS tenant.
  • Error usually depends on the IDP used   

Environment

SAP SuccessFactors HCM Core

Reproducing the Issue

  1. Go to Upgrade Center
  2. Run the Activate IAS 
  3. Click Test Now 

Cause

Starting with 2311 release, all the IAS configuration done with Initiate IAS Upgrade upgrade center task or via new tenant provisioning process are done on cloud.sap domain, so the IAS to corporate IDP communication would be on cloud.sap domain as well.

Resolution

The ondemand and cloud.sap URL are technically the same URL. One can download the metadata by using either https://<<IAS_TENANT>>.accounts.ondemand.com/saml2/metadata?action=download or 
https://<<IAS_TENANT>>.accounts.cloud.sap/saml2/metadata?action=download

Please do not change any SAML configuration in IAS tenant settings, as this could have a negative effect on other applications set up in IAS.

For the workaround, please see below: 

See Also

Keywords

SSO, activate, test, IAS, upgrade center, SF, SuccessFactors , KBA , LOD-SF-PLT-IAS , Identity Authentication Services (IAS) With BizX , Problem

Product

SAP SuccessFactors HXM Core 2311