Diagnosing SAML 2.0 Problems with the Security Diagnostic Tool for ABAP

You can use the Diagnostic tool to collect trace messages generated by the SAML 2.0 components.

1. In your Web browser, access the Security Diagnostic tool using the following URL:

   https://<host>:<port>/sap/bc/webdynpro/sap/sec_diag_tool?sap-client=<sap_client>

2. Log on with a user that has the role SEC_DIAG_TOOL_VIEWER or full administrative rights in the specified ABAP system.

3. In the Name field, enter a descriptive trace file name.

   If you do not enter a trace file name, the system generates one.

4. Choose the trace severity you need ( Debug, Info, or Error).

5. Start a tracing session by choosing Start.

6. Perform the sequence of SAML operations you need to diagnose.

   If you are debugging a problematic situation that occurred previously, recreate the original problematic situation as closely as possible.

   You can pause/resume the trace session when needed. If you want to view the collected trace messages while the trace session is running, choose Refresh and then click the name of the session in the table.

7. When the operations have finished, choose Stop to stop the tracing session.

   Created trace files are displayed in a table showing a summary of the collected messages, errors, start and stop time, and trace severity. The table is automatically refreshed when you stop tracing.