Single Sign On(SSO )is not working in SAC

[former_member703467]

I am trying to connect Hana service and SAC using HANA Live Connection with Direct Method. We have deployed the HANA Analytics Adapter. When we access the xsahaa aplication for the first time, after selecting the default Identity provider(mapped with mail ID) or the cIDP(Mapped with User ID) , then we can access the /sap/bc/ina/service/v2/HeartBeat without any issues.

Even at the time of Connection creation in SAC, the SSO worked fine and the reports are loading.

But after closing the browser and opening the xsahaa application or SAC report, then it asks for user credentials.

Default Identity Provider used is accounts.sap.com

Could anyone Help here?

[mfoeken]

Hi Ahamed,

SSO to SAP HANA from SAC will only work if you setup SAML SSO on your SAC tenant first using a custom IDP: Enable a Custom SAML Identity Provider.

Kind regards,

Martijn van Foeken | Interdobs

[former_member703467]

Hi Martijn,

Thanks for your reply.

Every time when we access the application https://*******-xsahaa-entry.cfapps.eu10.hana.ondemand.com/sap/bc/ina/service/v2/HeartBeat (or) GetServerInfo, there is a pop-up coming up asking for user credentials. Irrespective of whether we use this application in SAC to connect with the backend, SSO authentication should be working fine without any issues right? So is it backend application issue?

Thanks,

Jaman

[mfoeken]

Hi a.jaman,

Yes, expectation would be that when you browse to HeartBeat you would be logged in via SSO. What happens on the Network tab in Developer Tools when you browse to the 'HeartBeat' URL? Are you redirected to you IDP? Make sure to check while being in incognito mode. I would expect that you are redirected to the logon page of your IDP.

Kind regards,

Martijn van Foeken | Interdobs

[former_member703467]

Hi foekenm,

Thanks for your reply.

When I access HeartBeat URL, there comes a pop-up to enter user credentials both in normal mode and Incognito mode.

But firstly If I access xsahaa-entry.cfapps.eu10.hana.ondemand.com in Incognito mode, it's redirecting to logon page of IDP and when i select 'default Identity provider', it shows the welcome screen then secondly when i access Hearbeat URL in the same session, it works fine as well.

when I access xsahaa-entry.cfapps.eu10.hana.ondemand.com in Normal mode after clearing the cache, the same thing happen as above. But when i close the browser session and open again, it asks for the user credentials again.

Please Clarify.

Thanks,

Jaman

[mfoeken]

Hi a.jaman,

Does the live HANA connection in SAC works with SSO? Because you are referring to using the HAA.

Kind regards,

Martijn van Foeken | Interdobs

[former_member703467]

Hi foekenm,

SSO was not working and in every session it asked for user credentials. But Now I have made one change in xs-app.json.

I changed "authenticationType": "basic" to "authenticationType": "xsuaa" in the json file. Now I am able to access /sap/bc/ina/service/v2/HeartBeat and /sap/bc/ina/service/v2/GetServerInfo and there is no popup coming up asking for user credentials. It works fine with my default identity Provider (I have disabled all other Custom IDPs).

But When I create a Connection or access the existing reports in SAC, It says "We couldn't connect to your HANA system".

Earlier I had to choose the Identity provider every time but I was able to see the Reports,Create Connection etc.

After changing the json file, There is no popup coming asking for credentials but it says "We couldn't connect to your HANA system"

Could you please Suggest.

Thanks,

Jaman

[mfoeken]

Hi a.jaman,

What do you get in Developer Tools when trying to connect from SAC?

Kind regards,

Martijn van Foeken | Interdobs