How To Fix SAML2102 - Signing certificate of the SOAP message is not trusted

SAP Error Message - Details

• Message type: E = Error

• Message class: SAML2 - SAML2 Nachrichten

• Message number: 102

• Message text: Signing certificate of the SOAP message is not trusted

Self-Explanatory Message

Since SAP believes that this specific error message is 'self-explanatory,' no more information has been given.The majority of messages in the SAP system have a message text, however this is frequently insufficient to comprehend or resolve the problem.

To make things easier, more detailed information is frequently added to describe the issue, how to fix it, and the necessary steps or configuration modifications.

Unfortunately, there isn't any extra information in this error notice.

What else can you do?

First, use our AnswerBot below to get a possible cause and solution (requires a premium subscription).

Also, review the in-depth Common Questions & Answers listed below; you could discover a solution there or be able to connect with others who have faced similar challenges.

You can also try searching the SAP support portal (support.sap.com) but you need a special user ID to access it. It is possible that an SAP support note exists that provides additional details about the mistake or even steps for fixing it.

Smart SAP Assistant

• What is the cause and solution for SAP error message SAML2102 - Signing certificate of the SOAP message is not trusted ?

  The SAP error message SAML2102 indicates that the signing certificate of the SOAP message is not trusted. This typically occurs in scenarios involving SAML (Security Assertion Markup Language) authentication, where a SOAP message is signed with a certificate that the SAP system does not recognize as valid or trusted.
  Cause
  The error can be caused by several factors:
  
  Untrusted Certificate: The signing certificate used in the SOAP message is not present in the trusted certificate store of the SAP system.
  Expired Certificate: The certificate may have expired, making it invalid for use.
  Incorrect Configuration: The configuration for the SAML or SOAP service may not be set up correctly, leading to trust issues.
  Certificate Chain Issues: If the signing certificate is part of a chain, intermediate certificates may not be trusted or installed.
  
  Solution
  To resolve the SAML2102 error, follow these steps:
  
  
  Import the Signing Certificate:
  
  Obtain the signing certificate from the service provider (the entity sending the SOAP message).
  Import the certificate into the SAP system's trust store. This can typically be done using transaction STRUST.
  
  Go to STRUST.
  Select the appropriate PSE (Personal Security Environment) for your scenario (e.g., SSL Client (Anonymous), SSL Client (Standard), etc.).
  Click on "Import Certificate" and upload the signing certificate.
  Save your changes.
  
  
  
  
  
  Check Certificate Validity:
  
  Ensure that the certificate is not expired. If it is, request a new certificate from the service provider.
  
  
  
  Verify Configuration:
  
  Check the configuration settings for the SAML or SOAP service in your SAP system. Ensure that the endpoint and security settings are correctly configured.
  
  
  
  Check Certificate Chain:
  
  If the signing certificate is part of a chain, ensure that all intermediate certificates are also imported into the trust store.
  
  
  
  Restart Services:
  
  After making changes to the trust store, it may be necessary to restart the relevant services or the entire SAP system to ensure that the changes take effect.
  
  
  
  Related Information
  
  Transaction STRUST: This transaction is used to manage certificates and trust relationships in SAP systems.
  SAML Configuration: Ensure that the SAML configuration is correctly set up in the SAP system, including the identity provider (IdP) and service provider (SP) settings.
  Logs and Traces: Check the SAP application logs (transaction SLG1) and traces for more detailed error messages that may provide additional context for the issue.
  
  By following these steps, you should be able to resolve the SAML2102 error and establish a trusted connection for your SOAP messages.