SAP Knowledge Base Article - Preview

2926227 - SAML SSO fails with error "NameID format is not supported"

Symptom

  • You have configured SAML SSO between HANA and an IdP of your choice.
  • The SAML assertion forwards the user to the IdP where it is  successfully authenticated.
  • However the user is then forwarded to http://<hostname>:80<instance_number>/sap/hana/xs/saml/login.xscfunc where a generic error is displayed.
  • You check the xsengine trace file and find this error:

"Assertion authentication for user failed with reason: NameID format is not supported(StatusCode: , StatusMessage: )"


Read more...

Environment

  • SAP HANA 1.0 SPS12
  • SAP HANA 2.0  
  • XS Engine Classic 

Product

SAP HANA 1.0, platform edition ; SAP HANA, platform edition 2.0

Keywords

HANA, SAML, SSO, NameID, external identity,  WindowsDomainQualifiedName, unspecified, emailAddress , KBA , HAN-DB-SEC , SAP HANA Security & User Management , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.