topic Re: SAML questions in Application Development and Automation Discussions

SAML questions

Former Member — Mon, 01 Sep 2008 09:22:27 GMT

Dear community,

I am trying to configure SAML to work with web services on two SAP WAS, one of version 6.40 and another one of version 7.00 SP11. SAP uses SAML v.1.1 but I am not sure from which version it is enabled.

I have noticed that transaction SOAMANAGER does not exist on both WAS.

By following: http://help.sap.com/saphelp_nw70/helpdata/EN/47/1c32d641f64403e10000000a1553f6/content.htm

I don't understand the action:

You have configured your WS consumers in the AS ABAP to use SAML token profiles, that is, you have made the setting SAML Assertion in the individual configuration.

Where exactly do I have to do this?

I've noticed that report report wss_info doens not exist on both WAS.

By following:

http://help.sap.com/saphelp_nw70/helpdata/EN/47/1c34fa41f64403e10000000a1553f6/content.htm

I've noticed that table USREXTID is empty in both WAS.

To resume, do we miss a package? is there something to activate somewhere? Shouldn't there be some configuration to be done on the java stack by adding an SAML login module on a particular web service?

If you could answer some of these questions, I would be very grateful!

Thank you for your time,

Tanguy Mezzano

Re: SAML questions

Former Member — Fri, 17 Oct 2008 14:16:05 GMT

Still pending...

Re: SAML questions

Former Member — Sat, 18 Oct 2008 12:43:31 GMT

SOAMANAGER was not in NW until version 7.0 SP14. The help documentation you are looking at is for NW 7.0. For NW 6.4 (NW04) look here:

[http://help.sap.com/saphelp_nw04/helpdata/EN/94/695b3ebd564644e10000000a114084/frameset.htm]

SAML is only available in the JAVA stack of NW04 and only Browser/Artifact profile. It also cannot act as a SAML authority.

Re: SAML questions

Former Member — Mon, 27 Oct 2008 12:12:18 GMT

Hello Shaun,

thanks for your helpful answer.

As we have ABAP stacks of versions 6.40 and 7.0 SP12, we use WSADMIN and WSCONFIG.

I've checked:

http://help.sap.com/saphelp_nw70/helpdata/EN/b0/4d2b418a3edb2be10000000a1550b0/frameset.htm

to authenticate to abap web services with saml.

But I see that program wss_info does not exist...

Is this also due to our missing package for soamanager?

thx again,

Tanguy Mezzano