How To Fix SRT_WSP895 - XI-Protocol not allowed for Secure Token Service Requests.(LP=&1 URL=&2)

SAP Error Message - Details

• Message type: E = Error

• Message class: SRT_WSP - Messages for SRT WSP

• Message number: 895

• Message text: XI-Protocol not allowed for Secure Token Service Requests.(LP=&1 URL=&2)

What causes this issue?

The Logical Port is configured to use the XI-protocol for
accessing the Secure Token Service (STS), but the STS doesn't support
the XI-Protocol.

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

System Response

The SOAP Processor has terminated.

How to fix this error?

Reconfigure that Logical Port in order to use the Web Service Protocol
instead of the XI-Protocol.

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message SRT_WSP895 - XI-Protocol not allowed for Secure Token Service Requests.(LP=&1 URL=&2) ?

  The SAP error message SRT_WSP895 indicates that there is an issue with the protocol being used for Secure Token Service (STS) requests in the context of SAP's web services. This error typically arises when the protocol specified in the request is not allowed or supported by the configuration of the SAP system.
  Cause:
  
  Protocol Mismatch: The error usually occurs when the request is made using a protocol (like HTTP or HTTPS) that is not permitted for the STS service. For example, if the STS is configured to only accept HTTPS requests and an HTTP request is made, this error will be triggered.
  Configuration Issues: The service might not be properly configured to accept the desired protocol. This could be due to settings in the SAP NetWeaver Administrator or other configuration files.
  Security Settings: Security settings may restrict the use of certain protocols for STS requests, especially in environments where security is a priority.
  
  Solution:
  
  
  Check Protocol Configuration:
  
  Ensure that the protocol used in the request matches the allowed protocols configured in the STS settings. If the STS is configured to accept only HTTPS, ensure that the request is made using HTTPS.
  
  
  
  Update Service Configuration:
  
  Go to the SAP NetWeaver Administrator (NWA) or the relevant configuration area in your SAP system.
  Navigate to the configuration settings for the Secure Token Service.
  Verify and, if necessary, update the allowed protocols to include the one you are trying to use.
  
  
  
  Review Security Policies:
  
  Check any security policies that may be in place that restrict the use of certain protocols. Adjust these policies if needed to allow the desired protocol.
  
  
  
  Test the Configuration:
  
  After making changes, test the configuration by sending a request to the STS to ensure that the error no longer occurs.
  
  
  
  Consult Documentation:
  
  Refer to the official SAP documentation for Secure Token Service and web service configurations for more detailed guidance on allowed protocols and configuration settings.
  
  
  
  Related Information:
  
  SAP Notes: Check for any relevant SAP Notes that may address this specific error or provide additional troubleshooting steps.
  Logs and Traces: Review the application logs and traces for more detailed error messages that may provide additional context for the issue.
  SAP Community: Engage with the SAP Community forums for insights from other users who may have encountered similar issues.
  
  By following these steps, you should be able to resolve the SRT_WSP895 error and ensure that your STS requests are processed correctly.