Header image

It's full of stars

Where documentation meets reality

Troubleshooting SAML 2.0 - SAML 2.0 trace with sec diag tool

By Tobias Hofmann September 24, 2020 Posted in SAP
Tags: abap icf netweaver saml2 sec_diag_tool sso trace wda

Reading time: 1 min read

SAP provides a nice trace tool for troubleshooting login errors with SAML 2.0: Sec Diag Tool. It is a WebDynpro ABAP application. Make sure to activate the necessary ICF services first before running the tool.

URL: /sap/bc/webdynpro/sap/sec_diag_tool/

In NPL: https://vhcalnplci:44300/sap/bc/webdynpro/sap/sec_diag_tool/ đź”—

With the tool you can start a SAML2 trace. When the trace starts it logs all related log files and makes them accessible in a table. Stopping the trace will save it and you can access it later for further references.

The tools logs a lot of SAML2 related information. You can see the HTTP information and headers, cookies, etc. As well as thrown ABAP error messages. This is the recommended tool to troubleshoot any SAML 2.0 related issues.