3694345 - Error "HTTP Status 400 – Identity provider could not process the message received" when logging out from SuccessFactors WorkZone

• When trying to logout from SuccessFactors WorkZone, users face the error HTTP Status 400 – Identity provider could not process the message received.
• When using WorkZone and SuccessFactors in the same browser tab, and trying to logout from WorkZone, user face a 400 error
• SuccessFactors WorkZone logout process fails when reaching SuccessFactors step.

SAP SuccessFactors WorkZone

Product team is discussing the cause of this error. 

If users are facing this error, collect SAML tracer following the KBA 2461862 - Collecting SAML traces with Chrome, Edge or Firefox | SAP Knowledge Base Article and observe where the logout fails:

• If it fails in the SuccessFactors step, it is possible to try workaround below: 

1. Set the "SP Sign Logout Response" under IDP-Initiated Global Logout in SF Provisioning to "No"
2. Then in IAS, disable "Require signed single logout messages" for SuccessFactors application.

NOTE: This will remove the SSL certificate layer in the logout process. 

Currently, our Product team is discussing the scenario to determine the cause and evaluate the possible actions. We will keep this KBA updated. 

• 3428231 - Error: HTTP Status 400 – Identity Provider could not process the message received - SAP for Me
• 2682874 - HTTP Status 400 - Identity Provider could not process the message received - Identity Authentication - SAP for Me

http status 400, identity provider error, logout error, workzone, successfactors, identity authentication services, ias, single logout messages, sp sign logout response, logout configuration, saml response, error message , KBA , LOD-SF-SWZ-AUT , User Authentication Issues , Problem