How To Fix 00787 - Caution: Certificate-based logon is rule-based

00787 - Overview

• Message type: E = Error

• Message class: 00 -

• Message number: 787

• Message text: Caution: Certificate-based logon is rule-based

What causes this issue?

The system was configured for the use of the rule-based certificate
logon (login/certificate_mapping_rulebased = 1).
In this case, the mapping table USREXTID is not evaluated. It does not
make sense to maintain mapping entries in the table USREXTID.

System Response

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

How to fix this error?

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message 00787 - Caution: Certificate-based logon is rule-based ?

  The SAP error message "00787 Caution: Certificate-based logon is rule-based" typically indicates an issue related to the configuration of certificate-based authentication in an SAP system. This error arises when the system is set up to use certificate-based logon, but the rules governing this logon method are not properly configured or are not being met.
  
  Cause:
  
  
  Configuration Issues: The system may not have the correct configuration for certificate-based authentication. This could include missing or incorrect entries in the profile parameters or the SSL configuration.
  Rule-Based Logon: The system is expecting a specific set of rules to be followed for certificate-based logon, and these rules may not be satisfied. This could involve user roles, permissions, or specific attributes that need to be present in the certificate.
  Certificate Issues: The certificate being used may not be valid, may not be trusted by the SAP system, or may not contain the necessary attributes required for authentication.
  
  
  Solution:
  
  Check Configuration: Review