How To Fix SUSR_CERT130 - Rule-based certificate mapping has been deactivated

SAP Error Message - Details

• Message type: E = Error

• Message class: SUSR_CERT - User Certificates Administration

• Message number: 130

• Message text: Rule-based certificate mapping has been deactivated

What causes this issue?

You can activate and deactivate rule-based certificate mapping using the
system parameter "login/certificate_mapping_rulebased".

System Response

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

How to fix this error?

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message SUSR_CERT130 - Rule-based certificate mapping has been deactivated ?

  The SAP error message SUSR_CERT130 indicates that the rule-based certificate mapping for user authentication has been deactivated in the system. This typically occurs in environments where SAP systems are configured to use X.509 certificates for user authentication, such as in scenarios involving Single Sign-On (SSO) or secure access via SSL.
  Cause:
  The error can be caused by several factors:
  
  Configuration Settings: The rule-based certificate mapping feature may have been explicitly deactivated in the system settings.
  Missing Authorization: The user may not have the necessary authorizations to access the certificate mapping functionality.
  System Profile Parameters: Certain profile parameters related to security and authentication may not be set correctly.
  Technical Issues: There may be underlying technical issues or bugs in the SAP system that prevent the feature from functioning correctly.
  
  Solution:
  To resolve the SUSR_CERT130 error, you can follow these steps:
  
  
  Check Configuration:
  
  Go to transaction SICF and ensure that the service for the rule-based certificate mapping is activated.
  Verify the settings in transaction SU01 for the user profile to ensure that the user is set up correctly for certificate-based authentication.
  
  
  
  Activate Rule-Based Mapping:
  
  Use transaction SUSR to check the settings for certificate mapping.
  If it is deactivated, you may need to activate it. This can typically be done in the system settings or configuration.
  
  
  
  Review Authorization:
  
  Ensure that the user has the necessary authorizations to perform certificate mapping. Check the roles and profiles assigned to the user.
  
  
  
  Check Profile Parameters:
  
  Review the instance profile parameters related to security and authentication. Parameters like login/cert_mapping should be checked to ensure they are set correctly.
  
  
  
  Consult Documentation:
  
  Refer to the SAP Help Portal or relevant SAP Notes for detailed guidance on configuring certificate mapping and troubleshooting related issues.
  
  
  
  System Logs:
  
  Check the system logs (transaction SM21) for any additional error messages or warnings that might provide more context about the issue.
  
  
  
  Contact SAP Support:
  
  If the issue persists after checking the above steps, consider reaching out to SAP Support for further assistance, especially if you suspect a bug or a deeper technical issue.
  
  
  
  Related Information:
  
  SAP Notes: Look for specific SAP Notes related to SUSR_CERT130 for any known issues or patches.
  Documentation: Review the official SAP documentation on X.509 certificate authentication and rule-based mapping for detailed configuration steps.
  Community Forums: Engage with the SAP Community or forums where other users may have encountered similar issues and can provide insights or solutions.
  
  By following these steps, you should be able to diagnose and resolve the SUSR_CERT130 error effectively.