SAP Knowledge Base Article - Preview

3781302 - SSO authentication succeeds but different role is being applied due to missing role attribute

Symptom

  • SSO authentication works, but authorization does not apply the expected role mapping
  • user receives VIEWER instead of the expected ADMIN role after login
  • using the sso test link, login succeeds but the assigned role is incorrect
  • no specific error message or error code is shown


Read more...

Environment

SAP LeanIX MTM Single Sign-on

Keywords

sso, role mapping, role attribute, customer_roles, authorization, incorrect role, viewer instead of admin, saml assertion, missing claim, entra id, azure ad, leanix roles, self-service sso, idp configuration, saml trace , KBA , LIX-MTM-SSO , SAP LeanIX MTM Single Sign-on , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.