To be able to log in to your SAML 2.0 IdP after a SP redirect, the SP must be configured in your IdP. While this sounds obvious, it can be confusing when you have several clients in your IdP and several IdP in your SP. For instance, you must ensure Read more…
Scenario A user authenticated against the SAML 2.0 IdP. The OAuth client is sending the SAML 2.0 Response containing the user assertions to the NetWeaver ABAP system. An error of type invalid grant is returned. Error message: { “error”: “invalid_grant”, “error_description”: “Provided authorization grant is invalid. Exception was Attribute ‘Recipient’ of element ‘SubjectConfirmationData’ is invalid. For more information, consult the kernel traces or the OAuth 2.0 trouble shooting SAP note 1688545” } Root cause The OAuth client is sending the SAML Read more…
Scenario You send a SAML Bearer Assertion to the OAuth token service of SAP Gateway. The Return type is 400 Bad Request. Error message { “error”: “invalid_grant”, “error_description”: “Provided authorization grant is invalid. Exception was Message Assertion is not signed. For more information, consult the kernel traces or the OAuth 2.0 trouble shooting SAP note 1688545” } Root cause The error message contains a description of the root cause for the HTTP 400: “Exception was Message Assertion is not Read more…
References: Token Endpoint for OAuth 2.0 SAML 2.0 Bearer Assertion flow for OAuth 2.0 SCN Discussion The last configuration to be done before you can access an OAuth 2.0 protected OData service is to activate the token issuer service. To be able to access a resource, your OAuth client needs Read more…
SAP Help: Setting Up an OAuth 2.0 Client In this step an OAuth client is added. This is the client that logs on to NW ABAP on behalf of the end user. For this, the OAuth client is using an SAP user to log on. This user was created earlier Read more…
Configure NameID After adding the OAuth IdP its status is set to disabled. It can only be enabled after the NameID format is configured. Tx: SAML2 In the tab trusted providers select OAuth 2.0 Identity Providers to see all OAuth IdPs. Select the IdP you want to activate and click Read more…
Scenario After you have enabled your NetWeaver ABAP system to be an SAML 2.0 Service Provider you want to download its metadata and get an error message: 403 Forbidden. Tx: SAML2 Call the SAML 2.0 configuration Web Dynpro app via transaction SAML2 and click on Metadata. Select what to include Read more…
I run an SAP NetWeaver ABAP Dev Edition system in a Virtual Box VM. Unfortunately, the update process for this software is to delete and reinstall after the DB license expires. Installing a new NW ABAP version is not overly complex: the SAP provided installer is easy to use and Read more…
This blog will help you to connect to your SAP NetWeaver ABAP instance running inside a Docker container. For how to get NetWeaver running inside a Docker container, please see my blog Docker for SAP NetWeaver ABAP 7.5x Developer Edition. Note: The port information is specified when you start the Read more…
Not one of my most useful blogs, more like a reference in my library on how to update the Azure command (and a rant at the end). Documentation and the latest version available can be found at the Azure cli installation documentation. Check current installed version az –version In my Read more…