Health Check settings for SAP Web dispatcher using AWS Application load balancer

 To provide health check settings for SAP Web Dispatcher that sits behind a AWS Load Balancer -

Use the following path - /sap/public/ping

502 Bad Gateway - Sap Web Dispatcher as a target used in AWS Load Balancer

 Issue: 502 Bad Gateway is issued for any request which is issued to a SAP Web Dispatcher that sits behind  AWS Application load balancer.

Solution: Under the Target group defined in the AWS load balancer for the SAP Web dispatcher, ensure correct protocol version is defined.

You need to switch between the HTTP1/HTTP2 based on your version.

 

Test SAML SSO to HANA connection failed in Central Management Console (CMC)

The environment in test is

BOBJ - 4.2 SP3

HANA - 2.0 SP5

Method used : File based Trust store

Many blogs and SNotes were taken as a starting point in setting up the SSO between the SAP Business Objects and HANA DB.

https://blogs.sap.com/2020/03/22/sap-bi-platform-saml-sso-to-hana-database/

There's an SNote which provides documentation .
Configure SAML SSO to HANA according to 1900023 - How to setup SAML SSO to HANA from BI.

Based on my experience and all tests, the following pre-requisites are required.

1. Public URLs has to be setup to access XS admin page/Wdisp for the tenant DB

2. SSL is not mandatory.

3. HANA parameters to point to the correct Trustkeystore

4.FW to be open for the required ports.

Despite all the configuration, the test connection in CMC always resulted in ""Connection Failed: The test of the HANA SSO ticket used to log onto the HANA DB has failed due to: [10]: authentication failed. (FWM 02133)" error."

It looks like there is a bug in the CMC configuration window. Omit the entries for the Hana Tenant and instance number as highlighted in the screenshot below and the connection goes through fine.

Hope this helps.