A developer creates a new OData service (code, definition, implementation) in the backend and adds everything to a transport package. After transporting an OData service from DEV to QA in the backend, the service is not usable in QA as the system alias for the OData service is missing. While Read more…
There are many alternatives available to achieve single sign-on to a NetWeaver (ABAP) system. I’ve already demonstrated these at DSAG AK Development as well as documented almost all of them in my blog. For instance, take a look at SAML 2.0, X.509 based logon or OAuth 2.0. All of the Read more…
SAP provides a nice trace tool for troubleshooting login errors with SAML 2.0: Sec Diag Tool. It is a WebDynpro ABAP application. Make sure to activate the necessary ICF services first before running the tool. URL: /sap/bc/webdynpro/sap/sec_diag_tool/ In NPL: https://vhcalnplci:44300/sap/bc/webdynpro/sap/sec_diag_tool/ With the tool you can start a SAML2 trace. When Read more…
The ICF configuration is more complex than the standard SAML 2.0 configuration. Instead of just validating the SAML 2.0 response, the response must be validated, and a user created or update. To be able to create / update a user, the response received must be handled by a service user. Read more…
SAP Help Configuring the SAP Web AS for Supporting SSLicm/HTTPS/verify_clientConfiguring the AS ABAP to Use X.509 Client Certificates A pre-requisite is to configure NW ABAP to support TLS / HTTPS. To be able to log on to NW ABAP using a X.509 user certificate, the ICM service must be configured Read more…
SAP Help: Activate OData service Enable OAuth service For the OData service used, see my blog “Create an OData service from CDS”. Besides the option to activate an OAuth scope for an OData service manually, a wizard can be used. In that case, to enable OAuth for an OData service, Read more…
This blog will help you to connect to your SAP NetWeaver ABAP instance running inside a Docker container. For how to get NetWeaver running inside a Docker container, please see my blog Docker for SAP NetWeaver ABAP 7.5x Developer Edition. Note: The port information is specified when you start the Read more…
SAP NetWeaver comes with its own solution to prevent clickjacking for its most relevant UI frameworks. For more information about this protection, see the corresponding SAP Notes. WDA: 1872800. Clickjacking protection framework, see Note 2319727. By default, clickjacking protection is disabled. To activate it, you need to insert a value Read more…
Connectivity between SAP Cloud Platform and an on premise SAP NetWeaver system is normally achieved via SAP Cloud Connector. A nice feature depending on this is the remote connection of SAP Web IDE to an on premise ABAP system. The feature allows to easily load apps from the ABAP system Read more…
When you start the transaction SAML2 in your SAP NetWeaver ABAP system, you might geht the error message: ERROR: ICF-Service für ClickJacking-Framing-Protection ist inaktiv (termination: ERROR_MESSAGE_STATE) /sap/bc/webdynpro/sap/saml2?sap-client=xxx The solution can be found in SAP Note 2389051. Activate the ICF node UICS and its child whitelist: /sap/public/bc/uics Activate the node with Read more…