SSO Multiple Emarsys accounts against single SAP IAS Tenant

[GuilleBarbosa]

Hi experts.

We are in a situation where we need some help configuring SSO for two Emarsys accounts, against a single IAS Tenant (our production IAS Tenant).

We have two accounts, say EMARSYS-01 and EMARSYS-02

We manually created the application for EMARSYS-01 in our IAS tenant, following this tutorial Single Sign-On:: How to enable Single Sign-On with SAP Identity Authentication Service – Emarsys

The first acoount worked like a charm at first try (from IAS side and from Emarsys side), so we went for the second account, EMARSYS-02.

Again, following the previous oficial tutorial we found that we can't duplicate the entity ID, for this tenant.

So we tried to put something like "suite-sso-emarsys-02"  in the "name" field while creating the second application.

When we tried to configure SSO, it give us the common error "Error: Identity Provider could not process the authentication request received. Delete your browser cache and stored cookies, and restart your browser. If you still experience issues after doing this, please contact your administrator."

Fiddling in the communication, we've found that Emarsys is sending "suite-sso" as issuer. That's is the reason for the previous error.

<ns1:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">suite-sso </ns1:Issuer>

We can't find where to change this ID on Emarsys, and we need to have both accounts on SAP IAS (or even more if we keep working with the solution).

[GuilleBarbosa]

The solution is to create multiple ACS (Assertion Consumer Service) URLs, one for each account.

How to add Multiple Assertion Consumer Service (ACS) URLs:

• In the Assertion Consumer Service settings, add the login URLs for each Emarsys account.
• The format for the login URL is: https://sso.gservice.emarsys.net/login/auth/back.
• For each Emarsys account, append the specific account identifier to the login URL.
• For example:
  • Account ID 111111111: https://sso.gservice.emarsys.net/login/auth/back?account=111111111
  • Account ID 222222222: https://sso.gservice.emarsys.net/login/auth/back?account=222222222