Map the X.509 Certificate to the User on the SAP Application Server

The X.509 Certificate must be accepted for a successful Login.


  1. Start Transaction SM30.
  2. Enter VUSREXTID and click Maintain.

    Using the view VUSREXTID, you can setup a mapping between the Distinguished Name provided by a X.509 Certificate and an ABAP User.

  3. Choose the Distinguished Name for the External ID type.
  4. Create a new entry and activate it.