How To Fix 00137 - Logons from external user authentication are generally rejected

SAP Error Message - Details

• Message type: E = Error

• Message class: 00 -

• Message number: 137

• Message text: Logons from external user authentication are generally rejected

Self-Explanatory Message

Since SAP believes that this specific error message is 'self-explanatory,' no more information has been given.The majority of messages in the SAP system have a message text, however this is frequently insufficient to comprehend or resolve the problem.

To make things easier, more detailed information is frequently added to describe the issue, how to fix it, and the necessary steps or configuration modifications.

Unfortunately, there isn't any extra information in this error notice.

What else can you do?

First, use our AnswerBot below to get a possible cause and solution (requires a premium subscription).

Also, review the in-depth Common Questions & Answers listed below; you could discover a solution there or be able to connect with others who have faced similar challenges.

You can also try searching the SAP support portal (support.sap.com) but you need a special user ID to access it. It is possible that an SAP support note exists that provides additional details about the mistake or even steps for fixing it.

Smart SAP Assistant

• What is the cause and solution for SAP error message 00137 - Logons from external user authentication are generally rejected ?

  The SAP error message "00137 Logons from external user authentication are generally rejected" typically indicates that the system is configured to reject logon attempts from users who are authenticated externally, such as through an external identity provider or a different authentication mechanism.
  Cause:
  
  Configuration Settings: The SAP system may be configured to only allow internal authentication methods (like SAP user/password) and reject any external authentication attempts.
  User Type: The user trying to log in may be set up as an external user in the system, which is not permitted to log in under the current configuration.
  Profile Parameters: Certain profile parameters in the SAP system may restrict external logons.
  Security Policies: Organizational security policies may dictate that external authentication methods are not allowed for certain users or roles.
  
  Solution:
  
  Check User Configuration: Ensure that the user account is correctly configured for the type of authentication being used. If the user is supposed to authenticate externally, verify that the user type and roles are set up correctly.
  Review System Settings: Check the system settings related to authentication. This can include:
  
  Transaction RZ10 to review and modify profile parameters.
  Transaction SU01 to check user details and roles.
  
  
  Adjust Authentication Methods: If external authentication is required, you may need to adjust the system configuration to allow it. This could involve:
  
  Modifying the login/disable_external_auth parameter to allow external logons.
  Configuring the external authentication method properly (e.g., SAML, LDAP).
  
  
  Consult Security Policies: Review your organization’s security policies to ensure compliance and understand any restrictions that may be in place.
  Check Logs: Review the system logs for more detailed error messages that may provide additional context on why the logon was rejected.
  
  Related Information:
  
  SAP Notes: Check SAP Notes for any known issues or patches related to this error message. SAP frequently updates their knowledge base with solutions for common issues.
  Documentation: Refer to the official SAP documentation for details on configuring authentication methods and user management.
  Support: If the issue persists, consider reaching out to SAP support for assistance, especially if this is impacting business operations.
  
  By following these steps, you should be able to identify the cause of the error and implement a solution to allow the necessary logons.