User Not display in Launchpad (CF)

[miguel_apmbb80]

Hello.

I'm using SSO to access this client's launchpad service.

However, the name of the logged in user does not appear.

Could it be a lack of mapping?

Has anyone ever experienced this?

Information:

Identity Provider = Azure

Using Dynamic subject name identifier value:

[WouterLemaire]

is user store enabled in the config of azure ad? If not, probably the subject name identifier or assertion attributes in azure ad are not correct.

The login_name might not be the correct value in this case.

Are you using saml2 or openid? Can

You provide a network trace?

[gregorw]

Which additional assertions do you send for this app?

[MSo · Accepted solution]

Hi Leandro,

assuming that you're using SAML as SSO protocol, it is recommended to analyze the authentication flow with the SAML tracer - a browser add-on with which one can analyze the information flow from an identity provider to an application.

• authentication might fail in the corporate IdP - AAD in your example
• if authentication in AAD was successful and IAS is configured as a proxy it's useful to check the application trust config in IAS. If the access to the Launchpad is not possible at all, then the configuration for subject name identifier should be investigated (as already recommended by Wouter)
• if the authentication was successful and the user can access the Launchpad and it's just about missing firstname/lastname information, then you have to check the SAML attribute configuration.
• help docu for Launchpad trust config can be found here: https://help.sap.com/docs/WZ_STD/8c8e1958338140699bd4811b37b82ece/8d41d7ef7ff3499ea5642cc877fa5f55.h...

Marko