Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

NW 7.3 SSO to SuccessFactors

former_member184564
Participant
0 Kudos
416

Anyone come across the following issue with single sign on between SAP and SuccessFactors?

Caused by: dk.itst.oiosaml.sp.model.validation.ValidationException: The assertion must contain the service provider https://www.successfactors.eu or the company-wide service provider https://www.successfactors.eu/<companyID> within the Audience list: [https://www.successfactors.com]

at com.successfactors.authentication.service.saml2.extend.SFSAML2AssertionValidator.validate(SFSAML2AssertionValidator.java:90)

at dk.itst.oiosaml.sp.model.OIOAssertion.validateAssertion(OIOAssertion.java:217)

at com.successfactors.authentication.service.saml2.SFSAML2AssertionConsumerHandler.handleSAMLResponse(SFSAML2AssertionConsumerHandler.java:525)

... 58 more

OUr SF instance is in Amsterdam - perhaps there is a certificate for .eu  rather than .com.    Any pointers most welcome!

7 REPLIES 7

paul_snyman
Explorer
0 Kudos
170

Hi Stuart - I'm not seeing any brave replies to your issue yet We are experiencing the same for an EU instance so please update same if you solve this.

-Paul

0 Kudos
170

the answer was as suspected.   for EU ccertificate needs to be .eu.   And the SAP NW Identity provider needs to be set up for .eu.

Download the eu certificate from the web browser from  performancemanager.successfactors.eu...

0 Kudos
170

Hi Stuart,

Have you got any solution for this issue?

I am also experiencing the same.

Can you please guide what exactly you have done to overcome this..?

Thanks & Best Rgds,

Kiran Sathyan.

Jonathan_Hoare
Explorer
0 Kudos
170

Hi

I'm having the same issue, were based in EU and using *.successfactors.eu but were supplied the successfactors.com certificate. we did go back to SF but they just keep sending us the .com cert.

How do I get the correct .eu certificate?

I did go to the site and download the *.successfactors.eu cert from performancemanger5.successfactors.eu  but it didn't work.

Thanks

Jonathan

0 Kudos
170

Hi Jonathan,

Pls try using same certificate which is generated at portal end.

You need to provide the trusted provider as "www.successfactors.com" properly.

Thanks & Best Rgds,

Kiran Sathyan.

0 Kudos
170

Thanks Kiran

That did the trick got it working

Kind Regards

Jon

0 Kudos
170

Jon,

How were you able to fix this issue? Can you please provide how you were able to get the certificate and configure NW for .eu?

Thanks in advance,

Pavan.