How To Fix SPN054 - Hilfe zur Benutzerzuordnung

SPN054 - Overview

• Message type: E = Error

• Message class: SPN - SPnego

• Message number: 054

• Message text: Hilfe zur Benutzerzuordnung

&PREREQUISITES&
You have installed and licensed SAP Single Sign-On 2.0 or higher. It
comes with a front-end control that enables you to validate users from
the Active Directory database of the Microsoft Windows domain
controller. See SAP Note 1943266.

Das System gibt eine Fehlermeldung aus und erlaubt Ihnen nicht, mit dieser Transaktion fortzufahren, bis der Fehler behoben ist.

&USE&
In the current SAP system, you need a user with a User Principal Name
that is mapped to your SAP name. The
<DS:TRAN.SU01>User Maintenance</> (<ZH>SU01</> transaction) uses the
SNC name for the mapping because external systems recognize the SNC
name. The <ZH>User Mapping</> tab displays the user mapping, the User
Principal Name, the SNC name, the SAP name, the profile parameter for
constructing the SNC name and the mapping status.
&INTEGRATION&
The front-end control of the <ZH>KERBEROS</> or <ZH>SPNEGO
</>transaction simulates a Kerberos logon. It requests a Kerberos ticket
for the current Windows user from the Kerberos Distribution Center (for
example, Active Directory). This ticket is embedded in an SPNego token,
which is validated by the Application Server ABAP. After a successful
validation of the ticket, the front-end control extracts the User
Principal Name of your current user in the Windows domain from the
Kerberos ticket. Using the rules specified in the profile parameter
<DS:PP.SPNEGO/CONSTRUCT_SNC_NAME>spnego/construct_SNC_name</>, the
<ZH>KERBEROS</> or <ZH>SPNEGO</> transaction derives the SNC name from
the User Principal Name. Finally, the system checks whether it can find
an SAP name which is mapped to this SNC name. You find the mapping of
the SNC name to the SAP name in the <ZH>SNC</> tab of the the
<DS:TRAN.SU01>User Maintenance</> (<ZH>SU01</> transaction).
The mapping is client-specific.
Hint for the translators:
The sentence above refers to 'client' in the sense of the SAPterm term
'client' with the component BC-ABA.
NOTE
The assignment of the SNC name to the SAP user name in the <ZH>SNC</>
tab of the user maintenance must be unique.
The mapping of the current user name is complete when the indicator next
to the <ZH>SAP Name</> field is green.

Systemantwort

Wie behebe ich diesen Fehler?

Vorgehensweise für Systemadministratoren

Fehlermeldungsextrakt aus SAP-System. Copyright SAP SE