topic Authentication fails even though UDC syncs in Management & Governance

Authentication fails even though UDC syncs

Lauri — Tue, 25 Jul 2017 22:29:43 GMT

I've installed Sense Enterprise (June 2017) on a remote server, which is across a WAN, and not part of our domain. The Active Directory UDC that I set up on it is able to sync users from our local Windows AD, but I can't log into the hub with user credentials.

The System Proxy log shows:

Command=Login;Result=403;ResultText=Error: Access Denied. 'TryLogin'

Is this expected behavior? I've heard that 3rd party products like Okta can be a solution, but I figured if the UDC works, then the authentication should too.

Re: Authentication fails even though UDC syncs

Anonymous — Thu, 27 Jul 2017 18:13:00 GMT

Hi Lauri - Have you allocated login tokens to this user group? Under QMC->Manage Resources->License and tokens->User access allocations.

Pranav

Re: Authentication fails even though UDC syncs

Lauri — Thu, 27 Jul 2017 19:48:19 GMT

I just (re)learned that the Sense server needs to be a member of the AD domain for it to be able to authenticate to AD. That's not an option for us, so I'll pursue other options.

Thanks for the idea, Pranav. I had allocated tokens.