Use Salesforce as an identity provider to establish SSO to SAP WebGUI with SAML

[Former Member]

Hello,

I have configured Salesforce as an identity provider and I need help to configure SAP WebGUI as a service provider to create a single sign-on with SAML 2.0 between the 2 applications.

Here are my SAML configuration parameters :

- Issuer and entity ID : My Domain
- Certificate : Downloaded in Salesforce
- Request Signature Method : RSA-SHA256
- SAML Identity Type : Federation ID
- Service Provider Initiated Request Binding : HTTP POST

Now i need to configure SAP to accept the SAML 2.0. So i saw that i have to use the transaction SAML2 in NetWeaver but i don't know what to do after. And is it the only trabsaction to configure in SAP ?

Thank you for your help !

[cris_hansen]

Hi Aurélien,

I recommend you going through the following materials to have the SSO configured in your system - note that this is more related to SSO rather than WEBGUI:

Please check the following documentation:

http://help.sap.com/saphelp_nw73ehp1/helpdata/en/4a/b6df333fec6d83e10000000a42189c/content.htm?frame...

Here you will find how to configure SAML 2.0 on the system and how to enable ICF services for SAML 2.0 authentication.

If you are using a proxy please also check the following wiki: https://wiki.scn.sap.com/wiki/display/BSP/Using%20Proxies

You can also check the wiki for SAML 2.0 on ABAP server:
http://wiki.scn.sap.com/wiki/display/Security/Single+Sign-On+with+SAML+2.0#SingleSign-OnwithSAML2.0-...

and

http://wiki.scn.sap.com/wiki/display/Security/Troubleshooting+SAML+2.0+Scenarios

It contains information regarding the documentation, common scenarios, common problems, troubleshooting, etc.

Kind regards,
Cris