Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

NW 7.3 SSO to SuccessFactors

former_member184564
Participant
0 Kudos
417

Anyone come across the following issue with single sign on between SAP and SuccessFactors?

Caused by: dk.itst.oiosaml.sp.model.validation.ValidationException: The assertion must contain the service provider https://www.successfactors.eu or the company-wide service provider https://www.successfactors.eu/<companyID> within the Audience list: [https://www.successfactors.com]

at com.successfactors.authentication.service.saml2.extend.SFSAML2AssertionValidator.validate(SFSAML2AssertionValidator.java:90)

at dk.itst.oiosaml.sp.model.OIOAssertion.validateAssertion(OIOAssertion.java:217)

at com.successfactors.authentication.service.saml2.SFSAML2AssertionConsumerHandler.handleSAMLResponse(SFSAML2AssertionConsumerHandler.java:525)

... 58 more

OUr SF instance is in Amsterdam - perhaps there is a certificate for .eu  rather than .com.    Any pointers most welcome!

7 REPLIES 7

paul_snyman
Explorer
0 Kudos
171

Hi Stuart - I'm not seeing any brave replies to your issue yet We are experiencing the same for an EU instance so please update same if you solve this.

-Paul

0 Kudos
171

the answer was as suspected.   for EU ccertificate needs to be .eu.   And the SAP NW Identity provider needs to be set up for .eu.

Download the eu certificate from the web browser from  performancemanager.successfactors.eu...

0 Kudos
171

Hi Stuart,

Have you got any solution for this issue?

I am also experiencing the same.

Can you please guide what exactly you have done to overcome this..?

Thanks & Best Rgds,

Kiran Sathyan.

Jonathan_Hoare
Explorer
0 Kudos
171

Hi

I'm having the same issue, were based in EU and using *.successfactors.eu but were supplied the successfactors.com certificate. we did go back to SF but they just keep sending us the .com cert.

How do I get the correct .eu certificate?

I did go to the site and download the *.successfactors.eu cert from performancemanger5.successfactors.eu  but it didn't work.

Thanks

Jonathan

0 Kudos
171

Hi Jonathan,

Pls try using same certificate which is generated at portal end.

You need to provide the trusted provider as "www.successfactors.com" properly.

Thanks & Best Rgds,

Kiran Sathyan.

0 Kudos
171

Thanks Kiran

That did the trick got it working

Kind Regards

Jon

0 Kudos
171

Jon,

How were you able to fix this issue? Can you please provide how you were able to get the certificate and configure NW for .eu?

Thanks in advance,

Pavan.