SAP Single Sign-On

Last modified: April 18, 2024

1 Introduction

Mendix has single sign-on for SAP users (for some SAP regions). This means that you are authenticated to Mendix using SAP credentials.

One implication of this is that you must use the same username (in the form of an email address) for both SAP and Mendix.

2 Signing in to Mendix Using SSO

When you sign in to Mendix Studio Pro, you have the option to use SAP authentication or Mendix authentication.

2.1 Signing in Using Mendix Credentials

Enter your Username and Mendix Password. Click Sign in. This will authenticate you with the credentials held by Mendix.

2.2 Signing in Using SAP Credentials

Click SAP to use your SAP credentials. These credentials are region-specific, so you need to choose a region first.

Click Select region and you will be asked for your SAP credentials.

Enter the correct credentials and you will be signed in to Studio Pro.

3 Creating and Deploying Apps Using SSO

When you create an SAP app or a new SAP Business Technology Platform (SAP BTP) environment, you may be asked to sign in to SAP. For more information, see the Create a New Environment section in SAP BTP.

SAP SSO is triggered if you do not already have an active session in the SAP region you have selected.

First, select a region and click Next

If needed, you will be asked for credentials:

Enter the correct credentials and click SIGN IN to continue the creation of your SAP BTP environment.

4 Resolving “Go back to where you originally came from” Error

This error occurs when you work with SAP environments from within the Mendix Developer Portal. As described on the error page, it occurs when you use different usernames for signing in to Mendix platform and SAP region which you are working on.

Click Go back to where you originally came from, and you will see another error message. Click OK to clear it.

There are three possible solutions, depending on why the usernames are different. Some of these can be changed within Mendix itself, but you may also need to make changes directly on the SAP site.

4.1 Mendix username is correct but SAP username is incorrect

In this case you cannot resolve the issue from within Mendix. You will continue to get the error each time you try to link your accounts.

To resolve this problem, you must sign out of the SAP region so that you can then enter the correct credentials. The sign out page is based on the region you are using and has the format https://login.cf.{region}.hana.ondemand.com/.

For example:

Choose the URL for the correct region.

Select the down arrow next to your username, and this will give the option to Sign Out.

Click Sign Out and you can then return to Mendix and sign in again with an account which has the same email address as the username you use for Mendix.

4.2. You are using the wrong region

You may get this error if you have chosen the wrong region to deploy your app. Check that you have selected the right region. You can be signed in to several SAP regions and if you use different email addresses for these then this error can occur.

4.3 You are using the wrong Mendix account

If you have more than one account with Mendix, check that you have created your app using the correct Mendix account.

If you are using the wrong Mendix account, you will have to sign out of Mendix and sign in again with the correct account. You will then have to create the app again. Alternatively, you can be invited to join the app as another team member.

5 Read More