Skip to end of metadata
Go to start of metadata


The purpose of this document is to list the error codes that can be returned during a trusted RFC connection, including the meaning of each return code.


This page list the error codes that can be returned during a trusted RFC connection, including the meaning of each return code.


A trusted RFC was configured between two ABAP systems.

However, something is not correct at this setup, causing an error while such trusted connection is being used.

Such error is usually observed at a "CALL_FUNCTION_SINGLE_LOGIN_REJ" dump (transaction ST22).


Fix the incorrect settings related to the trusted setup.

Knowing the meaning of the return codes can help identifying what needs to be fixed.


  • The possible return codes for the "trusted system" (T-RC) are:
0Correct logon via trusted system.
1No trusted system entry for the caller system "<SID> " with the installation number " ", if this exists, or the security key entry for system "<SID> " is invalid.
2User "<user ID> " does not have RFC authorization (authorization object (S_RFCACL) for user "<user ID> " with client <client>.
3The time stamp of the logon data was invalid.


  • The possible return codes for the "logon procedure" (L-RC) are:
0USER_OKLogin was correct
1USER_NOT_ALLOWEDUser or password incorrect
2USER_LOCKEDUser locked
3STOP_SESSIONToo many attempts to log on
5BAD_BUFFERError in the authorization buffer
6CUA_MASTER_RECORDNo external user check
7BAD_USER_TYPEInvalid user type
8USER_NOT_VALIDValidity of user exceeded
9SNC_MAPPING_MISMATCHUser does not correspond to SNC name
10SNC_REQUIREDSecure connection required
11SNC_NAME_NOT_IN_ACLUser not found in USRACL(EXT)
12SNC_SYST_NOT_IN_ACLSystem not found in USRACL(EXT)
13SNC_MAPPING_NO_MATCHNo matching user found
14SNC_MAPPING_AMBIGUOUSMultiple user matches found
20TICKET_LOGON_DISABLEDLogon process deactivated
21TICKET_INVALIDData received not SSO ticket
22TICKET_ISSUER_NOT_VERIFIEDDigital signature not verified
23TICKET_ISSUER_NOT_TRUSTEDTicket issuer not trusted
24TICKET_EXPIREDTicket expired
26TICKET_WITH_EMPTY_USERIDTicket coontains an empty User ID
30X509_LOGON_DISABLEDSnc/extid_login_diag = 0
31X509_BASE64_INVALIDCert not base64-encoded
32X509_INVALID_SERVERX.509 not provided by ITS
33X509_HTTPS_REQUIREDCert not transferred via SSL
34X509_MAPPING_NO_MATCHNo matching account
35X509_MAPPING_AMBIGUOUSMultiple matching accounts
40EXTID_LOGON_DISABLEDsnc/extid_login_diag = 0
41EXTID_MAPPING_NO_MATCHNo matching account
42EXTID_MAPPING_AMBIGUOUSMultiple matching accounts
53PASSWORD_ATTEMPTS_LIMITEDLock counter exceeded
100CLIENT_NOT_EXISTClient does not exist
101CLIENT_LOCKEDClient locked


1002 Trusted system logon failed (no S_RFCACL authorization)

Related Content

Related Documents

Maintaining Trust Relationships between SAP Systems

Official SAP Support Video on Youtube

Related SAP Notes/KBAs

SAP note 128447: Trusted/trusting systems

SAP note 320991: Error codes during logon (list)