After creating an OAuth client user assigning the permissions to call the OAuth protected OData service, it is time to start the actual OAuth client configuration. First, add an OAuth Identity Provider (IdP). The OAuth IdP NetWeaver ABAP accepts is a normal SAML 2.0 IdP. This is because NW ABAP Read more…
SAP Help Registering an OAuth 2.0 Client SCN Wiki: S_SCOPE The client user was created in the previous step. With this, the OAuth client app can log on to Gateway. In theory, this could be enough to allow access to the Gateway service. The client could now send an access Read more…
SAP Help Configuring the role of the resource owner for OAuth 2.0 Enabling a user as resource owner for OAuth 2.0 With OAuth 2.0, the access to a resource / service is not done by a user directly, but by an OAuth client. The client logs on to Gateway and Read more…
SAP Help: Activate OData service Enable OAuth service For the OData service used, see my blog “Create an OData service from CDS”. Besides the option to activate an OAuth scope for an OData service manually, a wizard can be used. In that case, to enable OAuth for an OData service, Read more…
SAP Help: Enabling OAuth 2.0 Authentication for OData Services For the OData service used, see my blog Create an OData service from CDS. For each OData service you want to access through OAuth, a unique scope is needed. The scope is based on the OData service. The scope is needed Read more…
Scenario After you have enabled your NetWeaver ABAP system to be an SAML 2.0 Service Provider you want to download its metadata and get an error message: 403 Forbidden. Tx: SAML2 Call the SAML 2.0 configuration Web Dynpro app via transaction SAML2 and click on Metadata. Select what to include Read more…
I run an SAP NetWeaver ABAP Dev Edition system in a Virtual Box VM. Unfortunately, the update process for this software is to delete and reinstall after the DB license expires. Installing a new NW ABAP version is not overly complex: the SAP provided installer is easy to use and Read more…
This is the introduction blog on how to activate SAML 2.0 based logon on SAP NetWeaver ABAP systems. The example configuration shown here is using SAP Gateway. It is the same procedure for any SAP NetWeaver ABAP system that allows SAML 2.0 logons. The system used while writing the blog Read more…
Die DSAG Technologietage 2020 in Mannheim sind jetzt schon – leider – seit ein paar Tagen beendet. Genug Zeit die Menge an Informationen etwas im Rückblick und Abstand betrachten zu können. Mein Fokus in diesem Blog ist die SAP Fiori Story und wie sie an den zwei Tagen erzählt wurde. Read more…
After establishing the trust between the SAML 2.0 IdP and SP and activating the IdP in SAP Gateway, the ABAP system is configured for SAML 2.0 logons. An easy way to test if SAML 2.0 is working is to log on to SAP WebGui for HTML. This is a standard Read more…