SEN and S/4 sso issue X-Frame-Options

[Sgemert]

Hello,

We have SEN Cloud using IAS for SSO. It is setup to use OpenID

We have onprem S/4, using the same IAS. It is setup to use SAML2

The IAS forwards requests to EntraID. 

In FLP we get SSO errors; 'X-Frame-Options' set to 'deny'

Note 2866562 - SAP Companion(Web Assistant) authentication error "This content can't be shown in a frame"... describes the issue. 

I added newWindowSAML=true to the parameter, but we still get the same error. Which, if I think of it, might make sense as SEN is not using SAML, but its using OpenID.

In the end we want sso work properly. Does the sso from SEN need to be reconfigured to use SAML?

Anyone that managed to solve this?

br

Sander van Gemert

SAP Enable Now 

[ShaneLipke · Accepted solution]

Hi,

SEN SSO definitely supports SAML but I'm not sure about OpenID, I suspect that this is your issue.  This KBA might be useful to get it working.

Regards
Shane

[Sgemert · Accepted solution]

Thank you Shane for your answer. The sso for SEN was setup by SAP using OpenID to our IAS tenant. That is the same tenant as where S4 is connected to. S4 is using Saml for sso

[Sgemert]

It is now solved

SAP changed the allowed urls at their end. We are still using OpenID so that was not the issue.

In case others have the same issue, ask SAP to add your urls to the allowed list of urls.