---
title: "Principal Propagation for Named Users"
description: "On premise the named-user mode uses principal propagation through the Cloud Connector; what to set up and what MDM refuses."
source: "https://help.rikaiso.com/public-cloud/2026.2/principal-propagation"
edition: "public-cloud"
editionLabel: "S/4HANA Public Cloud"
version: "2026.2"
latest: true
language: "en"
section: "Information for Administrators > Setting Up SAP S/4HANA Cloud Private Edition (On Premise)"
updated: "2026-11-05"
---

# Principal Propagation for Named Users

> On premise the named-user mode uses principal propagation through the Cloud Connector; what to set up and what MDM refuses.

> **Draft brief for authors.** Replace with the final text; keep the task-page structure.

**Page type:** Task · **Audience:** SAP BTP administrator (Private Edition)

**Contains:** the application destination with authentication PrincipalPropagation and proxy type On-Premise; the trust configuration in the Cloud Connector; why PrincipalPropagation with proxy type Internet is refused; a client-credentials caller is refused for such tables.

**Related information:** `identity-mode`, `cloud-connector`.

**Source in the product repository:** `docs/customer-setup-private-edition.md` §4, §6.