SAP Knowledge Base Article - Public

2962095 - Error when adding new SAML asserting party once IAS is enabled

Symptom

  • IAS is enabled in the instance
  • When adding a new SAML asserting party in the SSO Settings in Provisioning, you encounter error "You cannot enable more than one SAML assertion party when Identity Authentication Service is enabled"

Environment

  • SAP SuccessFactors HXM Suite
  • SAP Cloud Platform Identity Authentication Service

Reproducing the Issue

  1. Go to SSO Settings in Provisioning
  2. There is already an IAS SSO settings enabled
  3. Add a new SAML Asserting Party in the SSO Settings > Fill out the details > Click "Add An Asserting Party"
  4. Error "You cannot enable more than one SAML assertion party when Identity Authentication Service is enabled" appears

Cause

This is expected behavior

Resolution

There was patch released last August 14, 2020 by Engineering team that would show the error "You cannot enable more than one SAML assertion party when Identity Authentication Service is enabled" when adding a new SAML Asserting Party if the IAS is enabled. 

The system allows only one SAML assertion party to be enabled after the upgrading to IAS and enabling IAS.

So, if the provisioning flag for IAS is enabled, adding more than one assertion party to be enabled is not allowed. Another assertion party can be added, but cannot be enabled. If the IAS flag is disabled, more than one assertion parties can be enabled.

Workaround:

  • Add the new SAML Asserting Party to the IAS tenant via following:
    2674264 - Configuring SSO between Corporate IDP, IAS Tenant and SuccessFactors When Using IAS as Proxy to Corporate

See Also

  • 2674264 - Configuring SSO between Corporate IDP, IAS Tenant and SuccessFactors When Using IAS as Proxy to Corporate
  • 2791410 - Integrating SuccessFactors with SAP Cloud Identity Authentication Through the Upgrade Center

Keywords

IAS, error, sso settings, sso, single sign on, corporate idp, idp, saml, asserting party, You cannot enable more than one SAML assertion party when Identity Authentication Service is enabled, provisioning , KBA , LOD-SF-SER-REF , Instance Refresh , LOD-SF-PLT-SAM , SAML SSO First Time Setup , LOD-SF-PLT-IRT , Instance Refresh Tool , LOD-SF-PLT-IAS , Identity Authentication Services (IAS) With BizX , Problem

Product

SAP SuccessFactors HXM Core 2005 ; SAP SuccessFactors HXM Suite all versions