Name: Debugging a SAML Connection in SAP Customer Data Cloud
Uploaded: 2019-8-19
Duration: 241 s
Description: This video is a part of the series of videos which covers the SAML topic in detail. It covers how to debug a SAML connection and various tools you can use.

Share feedback

<p><u><strong>Planned maintenance of Practice Systems</strong></u></p>

Planned maintenance of Practice Systems

Why create an SAP account?

Enhance your learning experience

SAP Learning

Choose your subscription

Manage your subscription

Live Sessions

Hands-on Practice

Certification

My Learning

Ready to start learning?

<div><div><div><div><div><div><div><div><div>This video is a part of the series of videos which covers the SAML topic in detail. It covers how to debug a SAML connection and various tools you can use.<br></div></div></div></div></div></div></div></div></div>

Debugging a SAML Connection in SAP Customer Data Cloud

In this video, we will take a look at some of the key data that is passed back and forth during Assemble Connection, so we can start to understand how to find problems with the integration. Let's talk a little bit about tools. We want to inspect some of the network traffic and transform the data a bit. So it will be important to be familiar with either your browser's network panel or a separate network capture tool. You also want a tool that can decode base64 data. Many text editors, programing languages, and online tools can handle this for you. Some simple integrations compress their communications. If that's the case, you'll need to be able to inflate the data rather than reading a slide about stepping through the requests and debugging. Let's jump into a browser window and take you through an SB initiated example, with some attention to the underlying data that is being passed around. The ESP initiated flow is generally more complex and informative than the IDP initiated flow. Now let's go through this service. Provider initiated flow again, but this time we'll capture some network traffic. When we click this external IDP button, it's going to open a separate tab. And that can be tricky to capture with the built in network panel. So we are going to open source proxy. When we click the external IDP button is going to make a few requests very quickly. If you look back at the cross proxy window we can see that a few key things happened. The most important request here is going to be the post to similar end point. Within this post, if we look at the request, we can see there is a big blob of base64 encoded data. If you copy that entire object and switch over to the next editor. We can paste this data in here and decode it. Then format it a little bit more clearly. And now you can readily see some of the key pieces of information related to this connection. You can see the single sign on endpoint that it's planning on hitting on the identity provider site. You can see the assertion Consumer Service URL on the service provider site. You can see the issuer ID and you can see the exact 5 or 9 certificate. So this tells us a lot of information that can be carried over into the configuration. Now if you come back over to the proxy tool clear the output and start recording again. We can continue logging in. Arrive at the success page or stop recording. And we can locate where we post to the SAML endpoint. Again. And we can see now that there is a SAML response that's very similar to what we saw with the similar request. If you take the same data, put it into the editor in base64, decode it and format it. We can see the response that came back from that log in flow. If you scroll down a bit. We can see that we are getting the UID data, getting the email, getting the first name and the last name. So this is the way that you would be able to verify that the IDP is in fact sending the SAML assertions appropriately to the service provider. And once you're verified that it may be time to have a conversation with the client to make sure that they are in this set up correctly. And that covers the basics of debugging and testing a simple connection. Thanks for watching.