How To Fix WSS030 - No unique mapping for SAML authentication found (Issuer &3)

WSS030 - Overview

• Message type: E = Error

• Message class: WSS - Web Services Security

• Message number: 030

• Message text: No unique mapping for SAML authentication found (Issuer &3)

What causes this issue?

No unique mapping for SAML authentication found (Issuer &V3&)

System Response

Authentication failed

How to fix this error?

Please ensure the mapping is unique. You may check the mappings in
transaction SM30, view VUSREXTID, type SA. For more information on
mapping check the documentation and note 1254821.

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

SAML Issuer: &V3&
Certificate DN: &V1&&V2&
If you use report RSUSREXTID for maintaing the mapping, the following
information if usefull:
Type of External ID:SA
Prefix of External Name: &V4&
Name of Issuer: &V1&&V2&

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message WSS030 - No unique mapping for SAML authentication found (Issuer &3) ?

  SAP Error Message:
  WSS030 No unique mapping for SAML authentication found (Issuer &3)
  
  Cause
  This error occurs during SAML (Security Assertion Markup Language) authentication in SAP when the system tries to identify a user based on the SAML assertion but finds multiple or no unique mappings for the given SAML issuer. Specifically:
  
  The SAML issuer (the Identity Provider, IdP) sent an assertion.
  SAP tries to map the SAML assertion to a user in its system.
  The mapping configuration in SAP is ambiguous or missing, resulting in no unique user mapping.
  This can happen if:
  Multiple users are mapped to the same SAML issuer and attribute.
  The mapping configuration is incomplete or incorrect.
  The SAML assertion does not contain the expected attributes or identifiers.
  The SAML issuer name in the assertion does not match the configured issuer in SAP.
  
  
  
  
  Explanation
  In SAP SAML authentication, the system uses a mapping configuration to link the SAML assertion attributes (like NameID, email, or other attributes) to SAP