You are on page 1of 5

2701254 - SAML2 - Logon problem after session expiry https://userapps.support.sap.

com/sap/support/notes/2701254

SAP Note

Language: English | Deutsch (?iv_language=D)

2701254 - SAML2 - Logon problem after


session expiry (/sap/support/notes/2701254)
Component: BC-SEC-LGN-SML (SAML 2.0 for ABAP), Version: 4, Released On: 25.10.2018

Symptom
Logon doesn't work after session has expired before. In the SAML 2.0 Security Diagnostic Tool trace one of the
following exceptions occurs:

1. "Attribute 'NotOnOrAfter' of element 'SubjectConfirmationData' is invalid."

2. "Parameter XML_STRING was either incorrectly set or not set in method PARSE_XML"

Other Terms
SAML 2.0

Reason and Prerequisites


The user's session has expired before.

The user has resend the HTML form to the server.

Solution
Apply the correction instruction.

Software Components
Software Component From Rel. To Rel. And subsequent

SAP_BASIS 702 702

SAP_BASIS 730 730

SAP_BASIS 731 731

SAP_BASIS 740 740

1 de 5 11/12/2023, 14:22
2701254 - SAML2 - Logon problem after session expiry https://userapps.support.sap.com/sap/support/notes/2701254

SAP_BASIS 750 753

Correction Instructions
Software Component Number of Correction
Instructions

SAP_BASIS (https://launchpad.support.sap.com/#/corrins 8
/0002701254/41)

Prerequisites
Software From To SAP Note/KBA Title Component
Component

SAP_BASIS 702 702 2352999 SAML 2.0 - improvements in traces BC-SEC-LGN-


(/sap/support/notes SML
/2352999 )

SAP_BASIS 702 702 2364767 Improve CALL 'SAML Login' and BC-SEC-LGN-
(/sap/support/notes received empty CONTEXT_REF SML
/2364767 )

SAP_BASIS 702 702 2423476 SAML2 logon, proper error messages BC-SEC-LGN-
(/sap/support/notes for locked ABAP accounts SML
/2423476 )

SAP_BASIS 702 702 2536209 HTTP status code in case of user is BC-SEC-LGN-
(/sap/support/notes locked or out of validity date SML
/2536209 )

SAP_BASIS 702 730 2016414 Show custom error page for automatic BC-SEC-LGN-
(/sap/support/notes account creation failures during SAML SML
/2016414 ) 2.0 logon

SAP_BASIS 730 730 2352999 SAML 2.0 - improvements in traces BC-SEC-LGN-


(/sap/support/notes SML
/2352999 )

SAP_BASIS 730 730 2364767 Improve CALL 'SAML Login' and BC-SEC-LGN-
(/sap/support/notes received empty CONTEXT_REF SML
/2364767 )

SAP_BASIS 730 730 2423476 SAML2 logon, proper error messages BC-SEC-LGN-
(/sap/support/notes for locked ABAP accounts SML
/2423476 )

2 de 5 11/12/2023, 14:22
2701254 - SAML2 - Logon problem after session expiry https://userapps.support.sap.com/sap/support/notes/2701254

SAP_BASIS 730 730 2536209 HTTP status code in case of user is BC-SEC-LGN-
(/sap/support/notes locked or out of validity date SML
/2536209 )

SAP_BASIS 731 731 2352999 SAML 2.0 - improvements in traces BC-SEC-LGN-


(/sap/support/notes SML
/2352999 )

SAP_BASIS 731 731 2364767 Improve CALL 'SAML Login' and BC-SEC-LGN-
(/sap/support/notes received empty CONTEXT_REF SML
/2364767 )

SAP_BASIS 731 731 2423476 SAML2 logon, proper error messages BC-SEC-LGN-
(/sap/support/notes for locked ABAP accounts SML
/2423476 )

SAP_BASIS 731 731 2536209 HTTP status code in case of user is BC-SEC-LGN-
(/sap/support/notes locked or out of validity date SML
/2536209 )

SAP_BASIS 740 740 2352999 SAML 2.0 - improvements in traces BC-SEC-LGN-


(/sap/support/notes SML
/2352999 )

SAP_BASIS 740 740 2364767 Improve CALL 'SAML Login' and BC-SEC-LGN-
(/sap/support/notes received empty CONTEXT_REF SML
/2364767 )

SAP_BASIS 740 740 2423476 SAML2 logon, proper error messages BC-SEC-LGN-
(/sap/support/notes for locked ABAP accounts SML
/2423476 )

SAP_BASIS 740 740 2536209 HTTP status code in case of user is BC-SEC-LGN-
(/sap/support/notes locked or out of validity date SML
/2536209 )

SAP_BASIS 750 750 2352999 SAML 2.0 - improvements in traces BC-SEC-LGN-


(/sap/support/notes SML
/2352999 )

SAP_BASIS 750 750 2364767 Improve CALL 'SAML Login' and BC-SEC-LGN-
(/sap/support/notes received empty CONTEXT_REF SML
/2364767 )

SAP_BASIS 750 750 2423476 SAML2 logon, proper error messages BC-SEC-LGN-
(/sap/support/notes for locked ABAP accounts SML
/2423476 )

SAP_BASIS 750 750 2536209 HTTP status code in case of user is BC-SEC-LGN-
(/sap/support/notes locked or out of validity date SML
/2536209 )

3 de 5 11/12/2023, 14:22
2701254 - SAML2 - Logon problem after session expiry https://userapps.support.sap.com/sap/support/notes/2701254

SAP_BASIS 751 751 2352999 SAML 2.0 - improvements in traces BC-SEC-LGN-


(/sap/support/notes SML
/2352999 )

SAP_BASIS 751 751 2364767 Improve CALL 'SAML Login' and BC-SEC-LGN-
(/sap/support/notes received empty CONTEXT_REF SML
/2364767 )

SAP_BASIS 751 751 2423476 SAML2 logon, proper error messages BC-SEC-LGN-
(/sap/support/notes for locked ABAP accounts SML
/2423476 )

SAP_BASIS 751 751 2536209 HTTP status code in case of user is BC-SEC-LGN-
(/sap/support/notes locked or out of validity date SML
/2536209 )

SAP_BASIS 752 752 2536209 HTTP status code in case of user is BC-SEC-LGN-
(/sap/support/notes locked or out of validity date SML
/2536209 )

Support Package
Software Component Support Package
Version

SAP_BASIS 702 SAPKB70222 (https://launchpad.support.sap.com/#/supportpackage


/SAPKB70222)

SAP_BASIS 730 SAPKB73020 (https://launchpad.support.sap.com/#/supportpackage


/SAPKB73020)

SAP_BASIS 731 SAPKB73124 (https://launchpad.support.sap.com/#/supportpackage


/SAPKB73124)

SAP_BASIS 740 SAPKB74021 (https://launchpad.support.sap.com/#/supportpackage


/SAPKB74021)

SAP_BASIS 750 SAPK-75014INSAPBASIS (https://launchpad.support.sap.com/#/supportpackage


/SAPK-75014INSAPBASIS)

SAP_BASIS 751 SAPK-75108INSAPBASIS (https://launchpad.support.sap.com/#/supportpackage


/SAPK-75108INSAPBASIS)

SAP_BASIS 752 SAPK-75204INSAPBASIS (https://launchpad.support.sap.com/#/supportpackage


/SAPK-75204INSAPBASIS)

SAP_BASIS 753 SAPK-75301INSAPBASIS (https://launchpad.support.sap.com/#/supportpackage


/SAPK-75301INSAPBASIS)

4 de 5 11/12/2023, 14:22
2701254 - SAML2 - Logon problem after session expiry https://userapps.support.sap.com/sap/support/notes/2701254

This document is causing side effects


SAP Note/KBA Title

2737763 SAML2 - Logon problem after session expiry (2) (/sap/support/notes/0002737763)

This document is referenced by


SAP Title
Note/KBA

2839828 SAML 2.0 error: "CX_SAML20_ASSERTION: The assertion has already been consumed"
(/sap/support/notes/2839828 )

2737763 SAML2 - Logon problem after session expiry (2) (/sap/support/notes/2737763 )

Legal
Privacy (http://www.sap.com/corporate-en/about/legal/privacy.html) |
Terms of use (https://support.sap.com/support-programs-services/about/terms-of-use.html) |
Legal Disclosure (http://www.sap.com/corporate-en/about/legal/impressum.html) |
Copyright (http://www.sap.com/corporate-en/about/legal/copyright/index.html) |
Trademark (http://www.sap.com/corporate-en/about/legal/copyright/index.html#trademark)

Follow
(https://www.facebook.com/SAPDigitalBusinessServices) (https://twitter.com/SAPSupportHelp)

(https://www.youtube.com/user/SAPSupportInfo) (https://www.linkedin.com/groups/138840)
(https://plus.google.com/+SAPCloud)

SAP ONE Support Launchpad


Home (https://launchpad.support.sap.com) | My Favorite Notes (https://launchpad.support.sap.com/#/mynotes?tab=Favorites) |
Expert Search (https://launchpad.support.sap.com/#/mynotes?tab=Search)

5 de 5 11/12/2023, 14:22

You might also like