Single Sign On Between SAP SuccessFactors and SAP ERP On-Premise

[Former Member]

Hello All,

We are trying to achieve SSO between SAP SuccessFactors and SAP ERP using Mashup (without AD). For this purpose, we have followed the instructions of SAP KBA 2253359. In our case, SF is the Identity Provider (IDP) and SAP is the service provider (SP). We are able to display the SAP logon screen within the SF page (if SAML2 is not activated). Where we got stuck is: when SAML2 service is activated in SAP ERP, all the login pages are getting re-directed to SuccessFactors login screen. We have a portal system, which needs to provide access to users through SAP WebGUI, by logging in using their SAP ID and Password. When SAML2 is activated, the WebGUI login screen is getting re-directed to SF Logon screen, which we do not want. Is there a way to configure SAML2 in SAP ERP Web AS ABAP so that it can route to IDP for selective resources only? We are on SAP Netweaver 7.5 SP11.

Thanks

Sid

[geferson_hess · Accepted solution]

Hello Siddhartha,

You can change the logon order of that specific server in SICF to 'Alternative Logon Procedure' and then select another method, like user/password.
You may also add the url parameter ?saml2=disabled in the service URL.

Regards,
Geferson Hess

[Former Member · Accepted solution]

Hi Geferson,

Apologies for the significantly late reply. We did figure out the alternative logon procedure thing ourselves, but ?saml2=disabled is a new learning you have given me. Thank you for sharing!