techsnapshots

Stay hungry Stay foolish….

  • Enter your email address to follow this blog and receive notifications of new posts by email.

    Join 2 other followers

  • Follow me on Twitter

    Error: Twitter did not respond. Please wait a few minutes and refresh this page.

IDP for SAP CE 7.2 on ADFS V3

Posted by techsnapshots on June 18, 2014


Here we will see how to configure IDP for SAP CE 7.2 on ADFS V3

Get the Metadata.xml from SAP CE and store it.

 Open Primary ADFS server

 

 Import manually the SAP CE metadata xml file

If you get any Warning while importing the SAP CE metadata , ignore it.

 Click Next

SHA-256 is default hash algorithm of ADFS. You can change the SignastureAlgorithm to SHA-1 on ADFS. I was not able to change it to SHA-1 while configuring SAP CE 7.2 Relying Party Trust. However we can change this later. So, I believe this is a bug here.

 Edit the claim rule.

 

Provide a Claim rule name and claim value

After Finish you can select the Properties and change the hash algorithm to SHA-1

 Provide the ADFS metadata to SAP

 Example:

 https://sts.yourcompany.com/FederationMetadata/2007-06/FederationMetadata.xml

 on ADFS server , if you get below data , it is not metadata, try it from another machine as shown below.

 

 On different machine.

On Firefox.

Two thing you need to configure SP on SAP CE. ADFS Metadata.xml and Token-signing certificate.

Right click the Token-Signing certificate – >detail -> Copy to file and export the certificate.

 copy cert

 Check the federation

https://sts.yourcompany.com/adfs/ls/idpinitiatedsignon

Advertisements

One Response to “IDP for SAP CE 7.2 on ADFS V3”

  1. This step by step is better than any other one I have found so far. Thanks!

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: