We have covered the integration between SAP HANA and SAML environments in our blogpost series about HANA SQL Command Network Protocol, where we also briefed about the protocol basis, the password-based authentication mechanisms and its support for federated authentication methods.

Among the supported federated authentication technologies is SAML.

Being an extensive platform targeted to the enterprise, the available support for federated identity protocols and technologies is varied. SAML-based authentication in SAP HANAįor those not familiar with the technology, HANA is SAP’s in-memory database, and the core component of their business technology platform where ERP, CRM, SRM and other solutions run. This blog post serves as an in-depth explanation of the issue and a walkthrough for validating the vulnerability and going through the recommended mitigation steps. You can find a more concrete technical explanation of the vulnerability and the details about the disclosure process in our security advisory SAUTH-2020-0001. We recommend SAP HANA customers check out SAP Security Note 2978768 (S-user required to access) published on December 8th 2020, review the recommended mitigation steps, and update their systems to version SAP HANA 2.0 SPS 05 revision 53, SAP HANA 2.0 SPS 04 revision 48.03 or SAP HANA 1.0 SPS 12 revision 122.33 whenever possible. This vulnerability allows an attacker with authenticated access to trick a SAP HANA instance into authenticating as a different user.

This blog post details a specific vulnerability affecting SAP’s HANA implementation of the SAML standard.

Validation rules in sap hana studio