How To Fix SAML2072 - Authentication failed: User locked by administrator

SAP Error Message - Details

• Message type: E = Error

• Message class: SAML2 - SAML2 Nachrichten

• Message number: 072

• Message text: Authentication failed: User locked by administrator

Self-Explanatory Message

Since SAP believes that this specific error message is 'self-explanatory,' no more information has been given.The majority of messages in the SAP system have a message text, however this is frequently insufficient to comprehend or resolve the problem.

To make things easier, more detailed information is frequently added to describe the issue, how to fix it, and the necessary steps or configuration modifications.

Unfortunately, there isn't any extra information in this error notice.

What else can you do?

First, use our AnswerBot below to get a possible cause and solution (requires a premium subscription).

Also, review the in-depth Common Questions & Answers listed below; you could discover a solution there or be able to connect with others who have faced similar challenges.

You can also try searching the SAP support portal (support.sap.com) but you need a special user ID to access it. It is possible that an SAP support note exists that provides additional details about the mistake or even steps for fixing it.

Smart SAP Assistant

• What is the cause and solution for SAP error message SAML2072 - Authentication failed: User locked by administrator ?

  The SAP error message SAML2072: Authentication failed: User locked by administrator indicates that the user account attempting to authenticate has been locked by an administrator. This typically occurs in environments where user accounts can be locked due to various security policies, such as multiple failed login attempts or manual locking by an administrator.
  Cause:
  
  Manual Locking: An administrator may have manually locked the user account for security reasons.
  Failed Login Attempts: The user may have exceeded the allowed number of failed login attempts, leading to an automatic lockout.
  Password Expiration: If the user's password has expired and they have not reset it, the account may be locked.
  Security Policies: Organizational security policies may dictate that accounts be locked after a certain number of failed login attempts or after a period of inactivity.
  
  Solution:
  
  
  Unlock the User Account:
  
  An administrator can unlock the user account using transaction code SU01 (User Maintenance).
  Enter the user ID and click on the "Lock/Unlock" button to unlock the account.
  
  
  
  Check User Status:
  
  In transaction SU01, check the user status to see if the account is locked and review any other relevant settings (e.g., password status, validity).
  
  
  
  Reset Password:
  
  If the password has expired, the administrator can reset the password for the user in the same SU01 transaction.
  
  
  
  Review Security Policies:
  
  Review the security policies in place regarding account locking and failed login attempts. Adjust settings if necessary to prevent future lockouts.
  
  
  
  User Education:
  
  Educate users about password policies, including the importance of using strong passwords and the process for resetting passwords.
  
  
  
  Monitor Login Attempts:
  
  Monitor login attempts to identify any patterns that may indicate unauthorized access attempts or user confusion.
  
  
  
  Related Information:
  
  
  Transaction Codes:
  
  SU01: User Maintenance
  SU10: Mass User Maintenance (for bulk operations)
  SU53: Display Authorization Check (to troubleshoot authorization issues)
  
  
  
  SAP Notes: Check SAP Notes for any specific patches or updates related to user authentication and account management.
  
  
  Security Settings: Review the security settings in the SAP system, including parameters related to user account management, password policies, and lockout thresholds.
  
  
  By following these steps, administrators can resolve the SAML2072 error and ensure that user accounts are managed effectively to maintain security while allowing legitimate access.