• Home
• App Integrations
• Single Sign-On Integrations
• SAP HANA Single Sign-On

SAP HANA SAML Single Sign-On (SSO)

---

SAP HANA Single Sign-On (SSO) is an advanced security feature that simplifies the login process for SAP HANA users. With Single Sign-On (SSO) for SAP HANA , users only need to log in once to access multiple SAP applications and systems, saving time and increasing productivity. It provides a centralized authentication mechanism and eliminates the need for multiple usernames and passwords, improving security and reducing the risk of password-related issues. This page provides a step by step guide using which you can configure SSO for SAP HANA easily.

Supported SSO Features

miniOrange SAP HANA SAML integration supports the following features:

• SP Initiated SSO Login: Users can access their SAP HANA account via a URL or bookmark. They will automatically be redirected to the miniOrange portal for login. Once they've signed on, they'll be automatically redirected and logged into SAP HANA.
• IdP Initiated SSO Login: Users need to login to the miniOrange first , and then click on the SAP HANA icon on the applications dashboard to access SAP HANA. (If you have set up any more Identity Sources, you will log in to that platform).

Follow the Step-by-Step Guide given below for SAP HANA Single Sign-On (SSO)

1. Configure SAP HANA in miniOrange

• Login into miniOrange Admin Console.
• Go to Apps and click on Add Application button.



• In Choose Application, select SAML/WS-FED from the application type dropdown.



• Search for SAP HANA in the list, if you don't find SAP HANA in the list then, search for custom and you can set up your application in Custom SAML App.

• Enter the following values in the respective fields.



SP Entity ID or Issuer:	https://www.sap.com/a/your_samlname
ACS URL:	https://www.sap.com/a/your_samlname
Name ID:	E-mail Address



• Go to the Add Policy and select DEFAULT from the Group Name dropdown.
• Now enter the name for your app authentication policy in the Policy Name field.
• Select PASSWORD from the First Factor Type dropdown.
• Click on Save to add SAP HANA.

Get IdP Metadata Details to upload to SAP HANA:

• Go to Apps >> Applications.
• Search for your app and click on the icon ' ' in Actions menu against your app.
• Click on Metadata to get metadata details, which will be required later. Click on Show SSO Link to see the IDP initiated SSO link for SAP Concur.



• Here you will see 2 options, if you are setting up miniOrange as IDP copy the metadetails related to miniOrange, if you required to be authenticated via external IDP's(okta,AZURE AD, ADFS, ONELOGIN, GOOGLE APPS) you can get metadata from the 2nd Section as shown below.



• Keep the Metadata URL and click on the Download Metadata button to download the Metadata XML file which you will require in Step 2.

2. Configure SSO in SAP HANA Admin Account

1. Login to your SAP HANA Admin Account and select New Trust Configuration



2. Upload the metadata file obtained from miniOrange. Provide a name for the IdP setup as well as a name that showup on the login screen (when you have multiple IdPs enabled).



3. Click Save.

3. Test SSO Configuration

Test SSO login to your SAP HANA account with miniOrange IdP:

Using SP Initiated Login

• Go to your SAP HANA URL, here you will be either asked to enter the username or click on the SSO link which will redirect you to miniOrange IdP Sign On Page.



• Enter your miniOrange login credential and click on Login. You will be automatically logged in to your SAP HANA account.

Using IDP Initiated Login

• Login to miniOrange IdP using your credentials.



• On the Dashboard, click on SAP HANA application which you have added, to verify SSO configuration.





Not able to configure or test SSO?


Contact us or email us at idpsupport@xecurify.com and we'll help you setting it up in no time.

External References

• What is Single Sign-On (SSO) and How does SSO Work?
• SAP HANA SAML Single Sign On