How To Fix SPN023 - Kerberos token create error:

SAP Error Message - Details

• Message type: E = Error

• Message class: SPN - SPnego

• Message number: 023

• Message text: Kerberos token create error:

&PREREQUISITES&
You have installed and licensed SAP Single Sign-On 2.0 or higher. It
comes with a front-end control that enables you to validate users from
the Active Directory database of the Microsoft Windows domain
controller. See SAP Note 1943266.

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

What causes this issue?

This message comes from the front-end control.
The front-end control simulates a logon by trying to request a Kerberos
token and by verifying it in the SAP system.
The request for creating a Kerberos token fails. The origin of the error
may be the front-end control or Active Directory.

System Response

How to fix this error?

If you get this error message, contact your Active Directory
administrator. Make sure that the Active Directory administrator
configures this user correctly in Active Directory.

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.