Jump to content

Authorization failure: unable to validate user credentials for half of business


Recommended Posts

Around 3 months ago, I switched us from an LDAP import to an Azure import to incorporate 2 large areas of our company, did testing on quite a few accounts that all seemed to work fine, now I find that there are a number of accounts with the correct email address etc in Hornbill however theyu receive the following when attempting to sign in with SSO.

 

image.jpeg.38cc19481fe461f51887e34b8ffd7e73.jpeg

 

Our SSO profile is linked to our Azure AD so I cant see that being the problem, any ideas?

 

Josh

Link to post
Share on other sites

@Josh Bridgens for the affected users, the value for "Name ID" attribute in the SAML response is not matching any value for "Logon ID" for any users in Hornbill. I would say to check what is being used for "Name ID" for these users in AD then check the "Logon ID" for these users in HB.

Link to post
Share on other sites
Just now, Josh Bridgens said:

seems you are correct

Ehm... seems? :P

You should be able to update the logon ID... unless that's not the issue and I am misunderstanding?

 

Link to post
Share on other sites

@Josh Bridgens ok so, I was advised changing the login ID will indeed check for the value against the user ID and login ID for existing users. This is required as some API calls where user ID is still used which is internally mapped to login ID. Can you try this report to see what user has that value for login ID or user ID?

users-for-josh.report_2.txt

Link to post
Share on other sites

@Josh Bridgens looks like I have to... might have been a bad import that created incomplete user records that exist in the system (almost certain based on the report result above). These "broken" user records are not visible in the UI. I'll send you a PM.

  • Sad 1
Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...