Name: SAML: Testing IDP Initiated SSO in SAP Customer Data Cloud
Uploaded: 2019-8-19
Duration: 227 s
Description: This video is a part of a series of videos which covers the SAML topic in detail. Here we cover how to test the IDP Initiated SSO once it is setup correctly.

Share feedback

<p><u><strong>Planned maintenance of Practice Systems</strong></u></p>

Planned maintenance of Practice Systems

Why create an SAP account?

Enhance your learning experience

SAP Learning

Choose your subscription

Manage your subscription

Live Sessions

Hands-on Practice

Certification

My Learning

Ready to start learning?

<div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div>This video is a part of a series of videos which covers the SAML topic in detail. Here we cover how to test the IDP Initiated SSO once it is setup correctly.</div><div><br></div></div></div></div></div></div></div></div></div></div><br></div></div></div></div></div></div></div>

SAML: Testing IDP Initiated SSO in SAP Customer Data Cloud

In this video we will cover testing IDP initiated SSO flow. In the last video, we configured an identity provider and created a fake service provider entry. Now I updated the entry to point to a real service provider in an identity provider initiated single sign on flow. We will test then IDP initiated signing. You want to log the user into the site and then make a call to a JavaScript SDK that feed them dot saml that's init SSL and pass in the service provider name and redirect URL. As you watched videos in this series, we have seen configuration options for single logout endpoints in a Saml identity provider. When those fields are properly configured, it creates a more tightly connected network of sites where the IDP is responsible for making sure that logging out of one site means logging out on all sites. Not all Saml systems support single logout. Now we'll take a look at an IDP initiated single sign on flow, as well as to a single log out using a test site. Now this is a simple login page using JavaScript SDK for view of the source. We can see that it is loading CDC JavaScript SDK. It's showing a screen set and on login it's going to prompt the user to see if they are interested in continuing on to an IDP initiated single sign on flow. Let's see how it works. If I login with Facebook, it verifies that I logged in. It asks me if I want to continue with it, and it's sold to the service provider that I set up called Request Site. If I click okay, I get redirected through Saml end point and it completes my login. You can see that it's pulled over my name and it tells me my UID on the site. Now at this stage, I can just click on the logout link and it will open my network panel to see what happens when I do. I'm going to preserve the log so that it doesn't do anything. If it switches between pages. And now that's a quick logout. You can see a few things happening here. First it makes a call to account set logout. That's a normal endpoint for logging out. Then you can see it makes some additional calls related to that single logout mechanism. Then as you might have expected, it will open up the proxy URL so that you can find out the logout page for the identity provider. That's some additional Saml assets. And then it does a socialize that logout over the service provider that we are all. Then it loads the logout URL. And at this stage you can see that we get a response from the identity provider logout page saying that we've been logged, that we will also get a separate response from the service provider page. And that can take a moment. Now we are logged out from the service provider as well as the identity provider. If we had multiple service providers, we'll be logged out from all of them. At this stage. I updated the page to indicate that you are logged out, and now it shows the login page for the service provider. So that covers verifying that an identity provider initiated flow is working. Thanks for watching.