SAP Knowledge Base Article - Preview

3831891 - Web-based UIs prompts for credentials on first access despite SAML2 being configured and working

Symptom

  • When starting some web-based transactions (e.g. WebGUI) with SAML2 enabled, the browser shows a login prompt (user/password) on the first attempt; subsequent attempts do not result in a prompt.
  • SAML2 authentication and the SAML2 transaction are confirmed to be working 
  • HTTP traces show a POST request to service /sap/bc/csp/report_rep_only which returns an HTTP/1.1 401 Unauthorized response.


Read more...

Environment

  • SAP S/4HANA foundation
  • ABAP Platform

Product

ABAP platform all versions ; SAP S/4HANA all versions

Keywords

SAML2, WebGUI, CSP, Content-Security-Policy, report-only, csp report, /sap/bc/csp/report_rep_only, /sap/saml2/sp/acs, SPNEGO, Negotiate, 401 Unauthorized, SICF, logon procedure, browser prompt, popup , KBA , BC-MID-ICF , Internet Communication Framework , BC-SEC-LGN-SML , SAML 2.0 for ABAP , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.