Disable Cookies in HTTP Destination

Question

Hi,
Is there a possibility to disable cookies for the visual admin? Because we want to disable this for the HTTP destination service in the visual admin.
br
Steven

Answer 1

Hi,
that is a strange error message.
I don't know how siteminder works but I guess your are using siteminder as SAML identity provider and configured the SAML Login Module in SAP to achieve SSO correct?
For this purpose you need to define a HTTP Destination which is than used as SAML Receiver.
What I do not get is the Cookie Problem.
I don't know exactly how your process flow is but it should be something like
- Your Client authenticates to your identity provider (let's say siteminder)
- Any time later you try to access any resource that is configured to support SAML using SAML Assertions (e.g. SAP J2EE)
- Your identitiy provider will generate an SAML Artifact an redirect you to the destination application (in your case some J2EE Application on SAP that is configured to validate your SAML Artifact (using the SAML Login Module)
=> This initial client request to your identity provider can contain cookies and you cannot avoid this since they are carried and sent by the client (Browser) => I hope this does not cause any problems because it really shouldn't
Nevertheless:
Your client request containing the SAML Articat (something like http://<j2eehost>:<j2eeport>/YourApp?TARGET=<YourApp>&SAMLArt=<Artifcat created by IDP>
reaches the engine:
Now the Engine creates an HTTP Post Request to your IDP that contains the SAML Assertion (SAML Assertion Request). This Assertion request also contains the Artifact and it does not contain any cookies!!! Your IDP now validates the Requests and sends an SAML Assertion Response to your engine (The SAML Login Module extracts the User from the Response (This one is carried in the NameIdentifier of the SOAP Message) and authenticates the user if it exists on the J2EE Engine
You finally receive the response of your Destination Application.
I don't really understand the cookie issue:
Maybe it really helps if you allow unsecure connections for SAML in SAP J2EE  (You can enable this under Visual Admin > Configuration Adapter > saml > Settings > AllowUnsecureConnections > true)
so you can use http instead of https. Now use Wireshark or tcpdump or something similar to create a dump of your traffic and analyze it to check where the problem is or maybe send it to me so I can have a look at it.
Hope this helps
Let me know if you need further assistance on this (Reward points for helpful answers are always appreciated )
Cheers