2471065 - SAML SSO failed with "Cannot honor virtual user request"

Symptom

SAML SSO is not working for Java System.

When reviewing the logs collected according to SAP Note 1332726, the 'Central Check' is failing with the error:

“Cannot honor virtual user request, there is an existing persistent user with the same logon ID.”

This issue occurs even though authentication via the SAML2LoginModule is successful.

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."

Central Check.jpg

Environment

SAP NetWeaver Application Server Java

Product

ABAP platform all versions ; SAP NetWeaver all versions

Keywords

Virtual Users, SAML2, Federation type, SAML2LoginModule, Central Check, FastLoginContext, Service Provider, Persistent Users, NameID , KBA , BC-JAS-SEC-SML , JAVA SAML 1.1 and 2.0 , BC-JAS-SEC-LGN , Logon, SSO , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.