Skip to Content
0
Jun 12, 2018 at 09:33 AM

SAP Cloud Platform and Identity Federation

134 Views

We have an application running on SAP Cloud Platform, neo edition, configured with SAML authentication. The application is connected to our, sap provided, Idp account, which proxy authentication to SAP corporate identity provider, with Identity federation turned on.

This configuration works well to allow authentication with SAP corporate identity provider and authorization with our, sap provided Idp account.

When a user is registered on the SAP corporate identity provider but is not present in our Idp account upon successful login a 401 unauthorized page is received, which is the correct behavior.

However, we would like to customize that page for our customer benefit, with a more meaningful message.

So far we tried to configure an "error-page" tag in the web.xml file of the app for a 401 error, however that triggers a 405 return from SAP Cloud Platform.

We also tried with the same technique to have an error page for the exception raised when a user is not registered in our Idp account, but that is not taken into consideration.

Are we doing something wrong? Can that be achieved?