How To Fix SO2_API020 - XSRF protection is activated for &1, but no BSP is marked as Start BSP


SAP Error Message - Details

  • Message type: E = Error

  • Message class: SO2_API - O2: Error Messages for Object Check

  • Message number: 020

  • Message text: XSRF protection is activated for &1, but no BSP is marked as Start BSP

  • Show details Hide details
  • What causes this issue?

    The XSRF protection is activated for the BSP application "&V1&" (see
    checkbox "XSRF Protection" on the "Properties" tab in the Web
    Application Builder for the BSP application).
    However, the "Start BSP" indicator is not set for any "Page with Flow
    Logic" or any "Controller" (checkbox "Start BSP" on the "Properties" tab
    in the Web Application Builder for "Page with Flow Logic" or
    "Controller").

    System Response

    Therefore, the application cannot be started with any Page/Controller.

    How to fix this error?

    If you want to start the application with a Page/Controller, set the
    "Start BSP" indicator for it.
    Refer to the documentation on the "XSRF Protection" indicator.

    Procedure for System Administrators

    The system issues an error message and will not allow you to continue with this transaction until the error is resolved.


    Error message extract from SAP system. Copyright SAP SE.


Smart SAP Assistant

  • What is the cause and solution for SAP error message SO2_API020 - XSRF protection is activated for &1, but no BSP is marked as Start BSP ?
    The SAP error message SO2_API020 indicates that Cross-Site Request Forgery (XSRF) protection is activated for a specific Business Server Page (BSP), but there is no BSP marked as the "Start BSP." This can occur when the system is configured to use XSRF protection, but the necessary configuration for the start page is missing.
    
    Cause: XSRF Protection Enabled: The XSRF protection feature is enabled in the system, which is a security measure to prevent unauthorized commands from being executed on behalf of a user. Missing Start BSP: The BSP application does not have a designated "Start BSP" defined, which is required for the XSRF protection to function correctly.
    Solution: To resolve this error, you need to ensure that a Start BSP is defined for the application. Here are the steps to do this: Identify the BSP Application: Determine which BSP application is causing the error. The error message will typically indicate the name of the BSP application

    Already have an account? Login here!




Instant HelpGet instant SAP help. Sign up for our Free Essentials Plan.


Related SAP Error Messages

Click the links below to see the following related messages:

Click on this link to search all SAP messages.


Rating
The AI Support Assistant is great. It provides comprehensive assistance even on the most difficult issues. I highly recommend this service.
Rate 1
John Jordan
SAP Consultant & Author