3702228 - backoffice sso login fails due to incompatible spring security saml extension after jdk21 migration

Symptom

Try to login to Backoffice via SSO, the login fails with the following exception:

logs.level: SEVERE
logs.message: Servlet.service() for servlet [samlsinglesignon] in context with path [/samlsinglesignon] threw exception [Filter execution threw an exception] with root cause
logs.thrown.message: Receiver class org.springframework.security.saml.metadata.MetadataGeneratorFilter does not define or inherit an implementation of the resolved method 'abstract void doFilter(jakarta.servlet.ServletRequest, jakarta.servlet.ServletResponse, jakarta.servlet.FilterChain)' of interface jakarta.servlet.Filter.

Check in the build logs, can find the below message:

2026-01-09 11:20:54,918 INFO d.h.c.h.PrintOutputHandler [Thread-18] stdout: [ysetplatformproperties] Ignoring duplicate extension samlsinglesignon at /opt/workspace/build/commerce-suite/hybris/bin/modules/platform/samlsinglesignon because it's configured at /opt/workspace/build/customer-project/hybris/bin/custom/sap/samlsinglesignon.
......
2026-01-09 11:13:59,852 INFO d.h.c.i.h.g.HashGeneratorUtils [main] Skipping generating hash from file: /opt/workspace/build/customer-project/hybris/bin/custom/sap/samlsinglesignon/resources/samlsinglesignon.build.number

Environment

SAP Commerce
SAP Commerce Cloud

Product

SAP Commerce Cloud, integration extension pack all versions

Keywords

backoffice, sso, jdk21, spring, security, saml, jakarta servlet api, tomcat 10.x, incompatible, spring-security-saml2-core, spring-security-saml2-service-provider, login failure , KBA , CEC-SCC-INT-IAS , IAS integration , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.