Jul 17, 2020 at 09:31 AM

Analyzing SAML issue in SAP NetWeaver ABAP system

200 Views Last edit Jul 17, 2020 at 11:12 AM 2 rev

We have configured an HR Portal (SAP Fiori) for many SAP-Users. For authentification we use SSO with SAML 2.0

When a user is not able to log on SAP Fiori launchpad, we make an active saml-trace to check the status in saml response to get the reason.

So far so good.

Because we don't want to make a trace for every SAP-User or to switch on the trace all the time (performance problem), who is not able to access the sap fiori launchpad, is there a possibility to save the saml response in a table or a log file or to read the saml response when SAP-User will access to sap fiori launchpad?

I have checked the possibility to extend the handler method "CL_HTTP_EXT_SAML20" of sicf-Service "saml2", but i have realized, that this method will not be called when calling the launchpad URL.

I would be happy if anybody has an idea to solve the problem.

Thanks,

Best regards,

Danny