Activating the ClickJacking-Framing-Protection service

Published by Tobias Hofmann on

1 min read

When you start the transaction SAML2 in your SAP NetWeaver ABAP system, you might geht the error message:

ERROR: ICF-Service für ClickJacking-Framing-Protection ist inaktiv (termination: ERROR_MESSAGE_STATE)

/sap/bc/webdynpro/sap/saml2?sap-client=xxx

The solution can be found in SAP Note 2389051. Activate the ICF node UICS and its child whitelist: /sap/public/bc/uics

Activate the node with sub nodes.

This will activate both services.

Go back to your browser with the HTTP 500 error and reload the page. Now the SAML 2.0 configuration wizard will launch.

Alternative activation option

You may also activate this ICF node using an alternative approach. Instead of activating it in the SICF transaction, you can use a transaction for activating special ICF services. More information at SAP Help.

Transaction SICF_INST
Technical name: UICS_BASIC

When you run this transaction with the technical name UICS_BASIC, the ICF node will be activated.

Result:

Let the world know
Categories: BasisSAP
Tags:

Tobias Hofmann

Doing stuff with SAP since 1998. Open, web, UX, cloud. I am not a Basis guy, but very knowledgeable about Basis stuff, as it's the foundation of everything I do (DevOps). Performance is king, and unit tests is something I actually do. Developing HTML5 apps when HTML5 wasn't around. HCP/SCP user since 2012, NetWeaver since 2002, ABAP since 1998.

0 Comments

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Related Posts

Basis Cloud OData SAP SAP Cloud

Troubleshooting WebIDE connection error to on premise ABAP system

Download PDF version4 min readAssume that you use SAP WebIDE for developing an application and that you have to consume an OData service from an on-premise NetWeaver ABAP system. In SCP, the destination is configured, Read more…

Basis SAP Security Technology

SSO Logon with X.509 certificate

Download PDF version5 min readSSO logon with an X.509 certificate offers some benefits. In this blog, I’ll cover the main benefits, problems and attention areas when using X.509 for SSO. As a practical example the Read more…

Basis SAP

X.509 troubleshooting – Enabling trust between NetWeaver and intermediate server

Download PDF version2 min readICM in NetWeaver ABAP is not reading the HTTP header and accepting the transmitted X.509 certificate simply like that. I’ll show here a picture that shows what an intermediate server is Read more…