1987828 - SAML SSO between HANA and BI failed with errors

Symptom

• Followed SAP note 1900023 to setup SAML SSO to HANA from BI, when testing the connection got error: Connection Failed: The test of the HANA SSO ticket used to log onto the HANA DB has failed due to: [10]:invalid username or password: . (FWM 02133).
  
• HANA authentication trace log contains error: SAMLAuthenticator.cpp(00387) : Assertion is not intended for this service provider

Reproducing the Issue

Log into CMC, go to Applications->HANA Authentication, click on "Test Connection" button in the "test the connection for this user" section.

Cause

Incorrect SAML service provider(SAML audience restrictions) was set on the HANA side.

Resolution

indexserver.ini->authentication->saml_service_provider_name need to be restored to default value, which is blank. This parameter only need to be set if the SAML assertions that will be sent to SAP HANA instance contain audience restrictions.

Header Data

Released On	05.03.2014 16:03:35
Release Status	Released to Customer
Component	HAN-DB-SEC SAP HANA Security & User Management
Priority	Normal
Category	Problem