Symptom
When you try to access the SAP Cloud For Customer system through SSO login using Safari browser you receive an error message:
Safari Can't Open the Page https://myXXXXXX-sso.crm.ondemand.com because Safari can't establish a secure connection to the server myXXXXXX-sso.crm.ondemand.com.
Environment
SAP Hybris Cloud For Customer.
Reproducing the Issue
-
Open Safari browser
- Type the URL from your system with SSO enabled: https://myXXXXXX-sso.crm.ondemand.com
- You will see the error message
Cause
The issue is due to trust between Safari, C4C system and the Identity Provider (IDP) server. C4C system is using DigiCert Baltimore CA and IDP server is using Entrust (or another one) as CA.
Resolution
You need to add the certificates from C4C system and IDP server to the Keychain to allow the access with Safari.
Keywords
Safari; SSO; MacOS , KBA , SRD-CC-IAM , Identity & Access Management , Problem