SAP Knowledge Base Article - Public

2932939 - Receiving local authentication fail in SF even though the Login Name in IAS matches the Username in SF exactly


You are seeing this error on the SSO logs "[local user authentication fail for user *******]" even though the Login Name in IAS matches the Username in SF exactly.

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."


SAP SuccessFactors HXM Suite


  • IAS is sending the Login Name in upper/lower case rather than what is actually defined in the field to Successfactors for authentication
  • For example IAS Login Name field contains 'aaaaa' the error log page in Successfactors shows 'AAAAA' is being sent to SF for authentication


  1. Go to the IAS application
  2. Under 'Applications' go to your Successfactors application
  3. Find 'Apply Function to Subject Name Identifier' 
  4. Set this to ‘None’ and that will ensure what is set as the the Login Name is sent to Successfactors for authentication 


Case sensitivity, Function to Subject Name Identifier, IAS sends name identifier in upper case, IAS sends name identifier in lower case, Login Name in IAS matches Username in SF exactly, IAS is sending username which is different to what is configured, Invalid Login. Please close your browser or re-login , KBA , LOD-SF-PLT-IAS , Identity Authentication Services (IAS) With BizX , BC-IAM-IDS , Identity Authentication Service , How To


SAP SuccessFactors HXM Suite all versions


Pasted image.jpg