Authentication fails even though UDC syncs

[Lauri]

I've installed Sense Enterprise (June 2017) on a remote server, which is across a WAN, and not part of our domain. The Active Directory UDC that I set up on it is able to sync users from our local Windows AD, but I can't log into the hub with user credentials.

The System Proxy log shows:

Command=Login;Result=403;ResultText=Error: Access Denied. 'TryLogin'

Is this expected behavior? I've heard that 3rd party products like Okta can be a solution, but I figured if the UDC works, then the authentication should too.

[Anonymous]

Hi Lauri - Have you allocated login tokens to this user group?  Under QMC->Manage Resources->License and tokens->User access allocations.

Pranav

[Lauri · Accepted solution]

I just (re)learned that the Sense server needs to be a member of the AD domain for it to be able to authenticate to AD. That's not an option for us, so I'll pursue other options.

Thanks for the idea, Pranav. I had allocated tokens.