How To Fix WSS029 - Message replay detected

WSS029 - Overview

• Message type: E = Error

• Message class: WSS - Web Services Security

• Message number: 029

• Message text: Message replay detected

What causes this issue?

A message protected by an XML Signature was resent.

System Response

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

How to fix this error?

The request received by the system (i.e. a consumer request or provider
response) was protected by an XML Signature to ensure the integrity of
the message.
The system stores the signature values of the XML Signature to prevent
replay attacks within a short timeframe, and checks if such a signature
has been sent before.
The received message contained a signature value it had received before,
indicating a message replay.

Procedure for System Administrators

Contact the communication partner to check how this situation could
occur.

Error message extract from SAP system. Copyright SAP SE.

WSS029 - Details

• SAP Error Message:
  WSS029 - Message replay detected
  
  
  Cause:
  The error WSS029 - Message replay detected occurs in SAP Web Services Security (WS-Security) scenarios when the system detects that a SOAP message has been replayed. This means the same message (or a message with the same unique identifier or timestamp) has been received more than once, which is considered a security risk.
  This typically happens because:
  
  The SOAP message contains a Timestamp and/or Nonce that has already been processed.
  The system maintains a cache or replay detection mechanism to prevent replay attacks.
  The client or an intermediate system is resending the same message (intentionally or unintentionally).
  Clock skew or incorrect timestamp settings causing the system to think the message is a replay.
  
  
  Explanation:
  In WS-Security, replay attacks are prevented by checking unique identifiers such as:
  
  Timestamps (Created and Expires)
  Nonces (random unique values)
  Message IDs
  
  If a message with the same timestamp and nonce is received again within the validity period, SAP flags it