SAP B1 Knowledge Base

Extended Protection

Component

Sana Web Service for SAP Business One

Symptom

When you connect to the Sana Web service for SAP Business One, the following error occurs:

"The extended protection settings configured on IIS do not match the settings configured on the transport. The ExtendedProtectionPolicy.PolicyEnforcement values do not match. IIS has a value of Never while the WCF Transport has a value of Always."

Cause

This error occurs because Windows Authentication is enabled for the Sana Web service in IIS, but the extended protection is disabled.

Solution

Step 1: Open the IIS Manager and select the web site which hosts the Sana Web service.

Step 2: Open Authentication settings of the web site.

Step 3: Select Windows Authentication and in the Actions pane on the right click Advanced Settings.

Step 4: In the Advanced Settings window, in the field Extended Protection, select Required.