SAP Knowledge Base Article - Public

3593719 - Singlelogout URL is blank after upload IDP metadata in SAP Analytics Cloud (SAC) version 2.0

Symptom

  • Single Logout URL is blank after upload IDP metadata

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."

Environment

  • SAP Analytics Cloud 2024.21 and higher

Reproducing the Issue

  1. Log in to SAP Analytics Cloud (SAC) .
  2. Go to System Administration > Security.
  3. Click Edit.
  4. In the Authentication Method, select SAML Single Sign-On (SSO).
  5. In Step 1, download and save the metadata file provided by SAP Analytics Cloud.
  6. Upload this metadata file to your SAML IdP.
  7. Noticed Single logout URL is blank.

Cause

  • The IDP has not enabled the SLO (Single Logout) service.

Resolution

The method of activating SLO varies depending on the IDP; please contact the IDP administrator for specific details.

Once SLO is successfully activated, the following fields will be added to the IDP metadata:

<md:SingleLogoutService 
    Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
    Location="<sample URL>"/>

Keywords

SAML, IDP, SAC Authentication / Login, SAC Administration  , KBA , LOD-ANA-AUT , SAC Authentication / Login , Problem

Product

SAP Analytics Cloud 1.0