SCP SAML API timeout CORS error

[Former Member]

Hi,

we are working on the SCP an have a HTML5 app deployed in combination with a backend API that is configured with a destination and secured by SAML login. The authentication is done by our own IdentiyTenant instance.

When the session times out, but the UI browser tab is not closed, but reloaded, or the user navigations inside the application and another request is send to the API we get an "Access-Control-Allow-Origin"-Error from the IdentiyTenant, because the API request is redirected there to log-in. It happens of course because the domain of the IdentityTenant is another than of the HTML5 application. How can we fix this error? Is there anyone who encountered a similar error and can provide us a solution, please?

Thanks 🙂

[former_member463010]

Hi Eike,

Hope all is well, in response to your question, could you try the following to see if it assists with your error:

1. In your SAP Cloud Platform Cockpit, go to the Destinations section
2. Create a Destination pointing to the URL you need to access, in this case, a destination for your identity tenant.
3. Under "Additional Properties" of this destination, add the "WebIDEEnabled" property and set the value "true"
4. In the SAP Web IDE application, configure the Destination and send the request via the Destination

I hope this helps with your issue 🙂

Best Regards,

Brendan O'Flynn