Preparing the SAML-Token-Profile-Issuing WS Consumer AS Java

Use

With this procedure, you determine the data that the accepting system requires. 

Prerequisites

●      You have configured your WS consumers in the AS Java to use SAML token profiles, that is, you have set SAML Assertion in the individual configuration, and selected the desired user.

More information: Configuring Trusted Partners and Attesters for SAML  

Procedure

...

Determine the issuer and signature certificate of the SAML assertion.

       1.      In SAP NetWeaver Administrator, start Configuration Management → Security → Trusted Systems.

       2.      Select the link Web Service Security SAML.

       3.      Choose the Local SAML Issuer of Assertion tab page.

       4.      Select your confirmer.

The name of the issuer is displayed in the Issuer table column, such as <SID>.

The table columns Keystore View and Private Key show where in the Java Keystore Service the SAML signature certificate can be found.

More information: Using the AS Java Key Storage 

The owner name for the certificate is displayed below the table, such as Owner Name: OU=J2EE,CN=<SID>.