How To Fix WSS023 - No mapping for SAML authentication found (Issuer &3)

WSS023 - Overview

• Message type: E = Error

• Message class: WSS - Web Services Security

• Message number: 023

• Message text: No mapping for SAML authentication found (Issuer &3)

What causes this issue?

The system received a SAML assertion, but it did not find a usermapping
to authenticate the user.

System Response

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

How to fix this error?

The certificate was trusted in the System PSE, but no mapping was
maintained. Maintain the user mapping. Please refer to the SAP
documentation and note 1254821.
SAML Issuer: &V3&
Certificate DN: &V1&&V2&
If you use report RSUSREXTID for maintaing the mapping, the following
information if usefull:
Type of External ID:SA
Prefix of External Name: &V4&
Name of Issuer: &V1&&V2&

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.

WSS023 - Details

• SAP Error Message:
  WSS023 No mapping for SAML authentication found (Issuer &3)
  
  Cause
  This error occurs when SAP receives a SAML assertion from an Identity Provider (IdP) with an Issuer value that is not recognized or mapped in the SAP system. Essentially, SAP cannot find a corresponding configuration or trust relationship for the SAML Issuer provided in the authentication request.
  In other words, the SAP system expects a certain Issuer name (entity ID) from the SAML token, but the Issuer in the token does not match any configured SAML Issuer in SAP's SAML 2.0 configuration.
  
  Explanation
  
  SAML Issuer: This is the unique identifier (entity ID) of the Identity Provider (IdP) that issues the SAML assertion.
  SAP needs to have a trust relationship configured for this Issuer to accept and process the SAML assertion.
  If the Issuer is unknown or not configured, SAP cannot authenticate the user and throws this error.
  
  
  Solution
  
  
  Verify the Issuer in the SAML Assertion:
  
  Check the SAML