SAP Knowledge Base Article - Preview

3015044 - SPNego logon fails with multiple SNC name mapping, error in trace 'User mapping for SNC name="p:CN=< user>@<domain>" ambiguous'


  • After SPNego Single Sign-On has been configured, login prompt is displayed when accessing application with SAP Web Gui
  • SICF configuration is adjusted for SPNego as first in Logon procedure List as described in the KBA 2544749 - SSO doesn't work for HTTP access to AS ABAP system due to unexpected logon procedure is used
  • Kerberos SSO Works with SAP GUI
  • SEC_TRACE_ANALYZER shows the following message for failed SSO with SPNego with SAP Web Gui:

SPNegoLogon: User mapping for SNC name="p:CN=< user>@<domain>" ambiguous

  • In the SAP NetWeaver AS ABAP system you try to connect to, you have mapped multiple usernames to the same SNC name under the option 'Other SAP Users With the Same SNC Names' in transaction SU01:


@" ambiguous'">


SAP NetWeaver


SAP NetWeaver 7.2 ; SAP NetWeaver 7.3 ; SAP NetWeaver 7.4 ; SAP NetWeaver 7.5 ; SAP enhancement package 1 for SAP NetWeaver 7.3


KBA , BC-SEC-LGN-SPN , SPNego for ABAP , BC-SEC-LGN , Authentication , BC-MID-ICF-LGN , ICF System Login , BC-IAM-SSO-SL , Secure Login , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.