Use SAML2 on SAP ABAP

[former_member182832]

Hi,

We are planning to activate SAML2 on SAP ECC system. Identity provider will be Windows AD FS. So I want to know if only activating SAML2 on SAP ABAP as a service provider will not require a Licence. Normally we are not using SAP SSO product in this case and we only delegate authentication to another tier for web scenarios using SAML2 standard.

Does anyone can help on this?

Thank you and regards,

Mehdi.

[cris_hansen · Accepted solution]

Hi Mohamed,

Please go through SAP note 1257108, a SSO troubleshooting note.

Please check this documentation too. Here you will find how to configure SAML 2.0 on the system and how to enable ICF services for SAML 2.0 authentication.

If you are using a proxy please also check this wiki.

You can also check the wiki for SAML 2.0 on ABAP server and also a wiki for troubleshooting on SAML 2.0 scenarios.

Regards,
Cris

[former_member182832 · Accepted solution]

Thank you Christiano.

As I understand from SAP Central Note 1848999, server to server communication does not require extra licenses which is the case of SAML2.

Regards,
Mehdi.

[cris_hansen · Accepted solution]

Hi Mehdi,

As it is not a separate product, then no, no need for a new license.

Only if you decide to use the SAP SSO v3.0 product, then separate license is required.

Regards,

Cris

[former_member182832 · Accepted solution]

Hi Christiano,

Thank you for the information. In my case there is no need for the SSO3 product. Only the activation of SAML2 with an existing AD FS as an IDP is required by the customer.

Regards,
Mehdi.