Symptom
- When navigating to Admin Center > Manage SAML SSO Settings, the page displays the error: “Failed to load asserting party list. Identity Authentication service is not well configured, please contact Admin.”
- When using Manage SAML SSO Settings > Download IAS Metadata File, the downloaded metadata still points to the old IAS tenant:
- Download IAS Metadata File from Manage SAML SSO Settings references an old/unused Identity Authentication (IAS) tenant instead of the currently configured IAS tenant in Provisioning
Environment
SAP SuccessFactors HCM Suite
Reproducing the Issue
- Sign in as an admin and navigate to Admin Center > Manage SAML SSO Settings.
- Observe the error on the page: “Failed to load asserting party list. Identity Authentication service is not well configured, please contact Admin.”
- Select Download IAS Metadata File.
- Open the downloaded XML and notice it references an old/unused IAS tenant rather than the currently configured IAS tenant.
Cause
- UI issue in Manage SAML SSO Settings when multiple SAML assertion records exist and an unused IAS asserting party remains enabled. The page may load with error message and the “Download IAS Metadata File” may reference the unused tenant, while end‑user SSO authentication via the correct IAS continues to work.
Resolution
- In Provisioning > SSO Settings, locate the SAML Assertion record corresponding to the unused IAS tenant and uncheck “SAML V2: SAP Identity Authentication Integration” for that unused record.
- If you only need IAS metadata, obtain it directly in IAS admin under Applications and Resources > Tenant Settings > SAML 2.0 Configuration.
- A code correction is planned to address the UI behavior as of July 9th.
See Also
- KBA 2674588 - [SSO] Manage SAML SSO Settings feature
- KBA 2461862 - How to capture a SAML 2.0 trace for troubleshooting
- KBA 2791410 - Integrating SAP Cloud Identity Services - Identity Authentication with SAP SuccessFactors
- KBA 3472405 - Deprecation of Basic Authentication and Third-Party Corporate Identity Provider (IdP) Direct Integration with SAP SuccessFactors HCM suite
Keywords
manage saml sso settings, failed to load asserting party list, identity authentication service not well configured, unable to access identity authentication service, ias metadata download, old ias tenant, unused asserting party, ias ips migration, sap identity authentication, provisioning sso settings, saml assertion record, metadata mismatch, sso ui issue, certificate validity, lms , KBA , LOD-SF-PLT-SEL , SSO Errors & Logs , Problem
Product
SAP SuccessFactors HCM Suite all versions
SAP Knowledge Base Article - Public