SAP ABAP 7.5 SSO using SAML thru Azure AD

[Former Member]

Hello,

I am new to setting up SSO using SAML. We have 7.5 Netweaver ABAP system that is used as SP. I am trying to setup SSO for the webgui service (SAPGUI for HTML) thru SAML using Azure AD as the identity provider. All the configuration is done and I can validate that the SSO works. (When accessing webgui url, it redirects to Azure sign-on page and upon successful authentication, redirects back to SAPGUI for HTML).

My issue is if the SAML configuration enabled, even the BEx web reports (path /sap/bw/bex) are being redirected to Azure AD for authentication. The BEx sicf service is configured for standard logon procedure & no changes done to this service. So I don't understand why it is using SAML and redirecting to Azure AD for authentication. Is this normal behaviour?

We currently do not want this to happen. Since SAML was configured for webgui service only, shouldn't SAML settings apply to webgui service only and not to BEx service?

Thanks,

Sid

[geferson_hess · Accepted solution]

Hello Sid,

This is normal behavior.
You can set URL parameter ?saml2=disabled or change the service's logon order.

Best regards,