Hi Ronnie,
check if the firefighter user has authorizations to object S_USER_GRP with ACTVT 03 and 05.
I get "Invalid SAP User" error if I deactivate this object from firefighter user and when I activate it again logon works just fine.
This applies at least to de-centralized model.
br,
Antti