SAP Knowledge Base Article - Preview

3663937 - Assertion Consumer Service (ACS) configuration options and behavior

Symptom

During SAML2 configuration, the Assertion Consumer Service (transaction SAML2 -> Tab Trusted Providers -> Tab Authentication Requirements -> Section Authentication Response) is automatically set to Default.

Certain scenarios present errors such as "No RelayState mapping found for RelayState value ouc…" or redirection to the wrong service, which are then fixed by changing the values for Assertion Consumer Service configuration, but it's unclear what's the actual behavior behind each option.

SAML authentication requirements tab

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."


Read more...

Environment

  • SAP S/4HANA
  • SAP NetWeaver
  • ABAP platform

Product

ABAP platform all versions ; SAP NetWeaver all versions ; SAP S/4HANA all versions

Keywords

Assertion Consumer Service, ACS, No RelayState, Authentication Requirements, Authentication Response, endpoints, Endpoint Path, Default Application Path, intent, fragment, semantic object, hashtag, #, anchor, /sap/saml2/sp/acs/ , KBA , BC-SEC-LGN-SML , SAML 2.0 for ABAP , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.