NW SSO 2.0 Secure login server Configuration, User Attribute Mapping

[Former Member]

Dear All,

I am implemnting NW SSO 2.0 for a customer , where their Windows AD and SAP user are not same .

During Secure login server, under Client Management , I am enbling the User attribute mapping , i am facing an error which says

the custom sttribute i have used is employeeNumber

UPN : Edward.Wafula@kpc.co.ke

USERID : Edward.Wafula

"Cannot perform user logon ID mapping due to invalid mapping attributes or LADAP DEstination"

The test connection works fine without enabling user attribute mapping.

Kindly find the attached error document .

Kindly help .

[Former Member]

Hello,

unfortunately I cannot see an attachment, but nevertheless:

1.     The employeeNumber attribute is available in the standard Active Directory Schema, but be sure that all users have a valid entry. If not you cannot use it for LDAP User Mapping.

2.     Also be aware of theLDAP Server Authentication setting you need for LDAP user mapping in  your Destination. The base DN should be something like DC=kpc,DC=co, DC=ke, the
technical Service User should be in UPN notation (example: adm@kpc.co.ke).

3.      Where do you have then added the "LDAP.employeeNumber" variable?

My first guess would be that the user you have tested have not a value saved in that employeeNumber attribute.

If you have still problems please attach a netweaver trace of a test run.

best regards

Alexander Gimbel

[Former Member]

Dear Gimbel,

Without user attribute mapping, the test works fine.

We are able to pull the data from Ad server.

Now the issue is with usr mapping .

Thanks

Ramya

[Former Member]

Hey, Did you solve this issue?