SAP Knowledge Base Article - Preview

2389051 - ICF service for Clickjacking Framing Protection is not active


When calling a web based application (eg: Web Dynpro, BSP, ITS) following error appears:

500 SAP Internal Server Error
ERROR: ICF service for Clickjacking Framing Protection is not active.  (termination: ERROR_MESSAGE_STATE)



  • SAP NetWeaver
  • Protection against Clickjacking attacks is activated 


SAP NetWeaver Application Server for ABAP for SAP S/4HANA all versions ; SAP NetWeaver all versions


whitelist, clickjacking, SICF, WHITELIST, 403, inactive, activate, SAP Internal Server Error, HTTP_WHITELIST, UI redressing attack, Framing Protection, Framing, IFrame, UI Redressing, X-FRAME-OPTIONS, ICF-Service für ClickJacking-Framing-Protection ist inaktiv , KBA , BC-WD-ABA , Web Dynpro ABAP , BC-FES-WGU , SAP GUI for HTML , BC-FES-ITS , SAP Internet Transaction Server , BC-WD-UR , Unified Rendering , BC-MID-ICF , Internet Communication Framework , BC-BSP , Business Server Pages , BC-FES-BUS , Netweaver Business Client , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.