Deleting SAML Identity providers on HANA

[Former Member]

1. We have multiple SAML Identity providers (SAML_PROVIDER_NAME) on our HANA, as a result of copying over Db from one environment to the other which lead to copying of SAML providers also.

We have users now with 4 different SAML Identity providers, whereas we should just have one. We want to have only the relevant SAML identity providers on each environment on HANA (Dev, Q and Prod) to avoid confusion.

2. To View the current defined SAML providers in the SAP HANA database, the following SQL works fine,

SELECT * FROM sys.SAML_PROVIDERS;

3. I went to the Security under my HANA system, selected SAML Identity Providers tab. When I tried to delete the unwanted Identity Providers, it gave me the following error,

Error while deleting SAML identity provider BIPRDSAML. Unable to drop SAML provider BIPRDSAML because of existing user mappings defined for that provider.

4. I referred to this SAP Note below,

2380670 - Error while deleting SAML identity provider <table>. Unable to drop SAML provider <table> because of existing user mappings defined for that provider.

The note said, to fix the issue, for a particular user, the following SQL was suggested,

To delete the user-provider combination from that mapping-table execute the following command:

ALTER USER <user_name> DROP IDENTITY FOR SAML PROVIDER <TABLE>

This however works for only one user,

The question is how do we delete or DROP the Identity providers association for all users on HANA ?

Regards

Varun

[martin_kittel]

Hi,

if you are using SAP HANA 2.0 SPS04 or later you can use the

DROP SAML PROVIDER <saml_provider_name> CASCADE

syntax to automatically also drop all user mappings (

https://help.sap.com/viewer/4fe29514fd584807ac9f2a04f6754767/2.0.04/en-US/20d76c8675191014b9acc9697a....

Best wishes,

Martin.