Symptom
- SSO authentication works, but authorization does not apply the expected role mapping
- user receives VIEWER instead of the expected ADMIN role after login
- using the sso test link, login succeeds but the assigned role is incorrect
- no specific error message or error code is shown
Read more...
Environment
SAP LeanIX MTM Single Sign-on
Keywords
sso, role mapping, role attribute, customer_roles, authorization, incorrect role, viewer instead of admin, saml assertion, missing claim, entra id, azure ad, leanix roles, self-service sso, idp configuration, saml trace , KBA , LIX-MTM-SSO , SAP LeanIX MTM Single Sign-on , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.
SAP Knowledge Base Article - Preview