Map the X.509 Certificate to the User on the SAP Application Server The X.509 Certificate must be accepted for a successful Login. Procedure Start Transaction SM30. Enter VUSREXTID and click Maintain. Using the view VUSREXTID, you can setup a mapping between the Distinguished Name provided by a X.509 Certificate and an ABAP User. Choose the Distinguished Name for the External ID type. Create a new entry and activate it.