Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

SNC login fail - now, can i use regular login ?

0 Kudos

Hello,

we have implemented sapGUI SSO (kerberos + SNC).

we face a problem with login of users who Doesn't HAVE SNC tab

configured with "p:<username>@<...>".

is it possible somehow to get the normal login page (username/password) if SNC login fail ??

regards

avishay

1 ACCEPTED SOLUTION

tim_alsop
Active Contributor
0 Kudos

Hi,

You need to:

1) Create another entry in saplogon.ini for the same system, but with SNC disabled. Then, use this to logon if SNC is not setup for the user.

2) Tell user to disable SNC in SAP Logon configuration and then try to logon again if they get an error.

3) Ensure that ALL users have an SNC name configured in USRACL table on each SAP system so that you won't get a logon failure like the one you describe.

Thanks,

Tim

3 REPLIES 3

tim_alsop
Active Contributor
0 Kudos

Hi,

You need to:

1) Create another entry in saplogon.ini for the same system, but with SNC disabled. Then, use this to logon if SNC is not setup for the user.

2) Tell user to disable SNC in SAP Logon configuration and then try to logon again if they get an error.

3) Ensure that ALL users have an SNC name configured in USRACL table on each SAP system so that you won't get a logon failure like the one you describe.

Thanks,

Tim

0 Kudos

hello tim, thanks

i know that using 2 saplogon.ini entries will workaround the problem, but we wish

the enterprise to MOVE to SNC , so it can't be done.

is there a way to get regular login after a SNC login failure ?

regards

avishay

tim_alsop
Active Contributor
0 Kudos

Avishay,

If SNC is configured in saplogon.ini as the method of authentication, and the SNC logon fails then you get an error message to show you that SNC logon has failed (e.g. because users SNC name is not configured in USRACL table). There is no way to change this - if you want to logon without SNC then you need to use a saplogon.ini entry which does not have SNC enabled.

To migrate to SNC you need to setup all users in USRACL and then you won't get any logon failures as you enable users for the SSO experience.

Thanks,

Tim