2970479 - Kerberos SSO failed: "No user exists with SNC name" with UPN alias set in AD

Symptom

After completing the Kerberos SSO configuration by following the steps in SAP Note 2949593, the following SNC error is showing when login to SAP system with SAP GUI.

No user exists with SNC name “p:CN= User ABC@<Realm of AD domain>”

The above error message is showing when set the alias UPN(User Principal Name) for the PC workstation users.

For example:
The Realm of AD(Active Directory) domain is @RealmofADdomain.com, but the UPN alias for the PC workstation users is @RealmofADdomain.net.

Environment

SAP Single-Sign On 3.0

Product

SAP Single Sign-On 3.0

Keywords

UPN alias, Kerberos, No user exists with SNC name, Secure Login Client, klist, net config workstation, SPNEGO, Active directory, realm, user principal, alias, AD , KBA , BC-SEC-LGN , Authentication , BC-IAM-SSO-SL , Secure Login , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.