WebPortal: authentication not working

Is there a person record linked to that Active Directory account? I can reproduce the same issue, ultimately we require that a person record is linked to the target system account you are trying to authenticate with.

Hello Troy. The person recors is linked ADSAccount.

I changed something but I get a similar message

2022-03-10 11:13:26.2641  INFO (    WebLog meg1tqiol15dbwehzbww5co5) : Authenticating session using RoleBasedADSAccount 
2022-03-10 11:13:27.2652  WARN (    WebLog meg1tqiol15dbwehzbww5co5) : System.Exception: Single-sign-on failed, URL was /ExternalUsers/page.axd?RuntimeFormID=ecdf9215-9ff6-4940-af41-05b94e980aa1&aeweb_handler=p&aeweb_rp=&wproj=0&ContextID=VI_Session ---> VI.Base.ViException: Failed to authenticate user. ---> VI.Base.ViException: The current user could not be determined.
   at VI.DB.Auth.AdsAccountHelper.GetSsoIdentity(IAuthProps props)
   at VI.DB.Auth.AuthModRoleBasedADSAccountBase.GetWindowsIdentity(IResolve services, IAuthProps props)
   at VI.DB.Auth.AuthModRoleBasedADSAccountBase.GetPersonDataAsync(IDbSession dbSession, IResolve services, IAuthProps props, CancellationToken cancellationToken)
   at VI.DB.Auth.AuthModRoleBasedBase.<AuthenticateAsync>d__1.MoveNext()

Hi,

Perhaps this will help you:

https://support.oneidentity.com/identity-manager/kb/329578/unable-to-authenticate-to-the-web-portal-using-single-sign-on

Or this:

 Active Directory Authentication not working 

Also, have you configured the config parm TargetSystem\ADS\AuthenticationDomains?

HTH, Barry.

Hi,

Perhaps this will help you:

https://support.oneidentity.com/identity-manager/kb/329578/unable-to-authenticate-to-the-web-portal-using-single-sign-on

Or this:

 Active Directory Authentication not working 

Also, have you configured the config parm TargetSystem\ADS\AuthenticationDomains?

HTH, Barry.

Thanks Barry but the error is the same. that's strange actually.

2022-03-10 14:35:22.2328  INFO (    WebLog ) : Loading compiled webapp DLL: Webapp_VI_StandardWeb_Debug_APNwjZ3s3FHMCdroMosc7JSTGxhJAx4AX 
2022-03-10 14:35:22.2638  INFO (    WebLog ) : Loading assembly: Webapp_VI_StandardWeb_Debug_APNwjZ3s3FHMCdroMosc7JSTGxhJAx4AX, Version=1.0.8103.30434, Culture=neutral, PublicKeyToken=null 
2022-03-10 14:35:22.3117  INFO (    WebLog ) : Loading compiled webapp DLL: Webapp_VI_UserRegistration_Web_Debug_APNwjZ3s3FHMCdroMosc7JSTGxhJAx4AX 
2022-03-10 14:35:22.3117  INFO (    WebLog ) : Loading assembly: Webapp_VI_UserRegistration_Web_Debug_APNwjZ3s3FHMCdroMosc7JSTGxhJAx4AX, Version=1.0.8094.40398, Culture=neutral, PublicKeyToken=null 
2022-03-10 14:35:33.8320  INFO (    WebLog meg1tqiol15dbwehzbww5co5) : Module instance created: VI_Session 
2022-03-10 14:35:33.8320  INFO (    WebLog meg1tqiol15dbwehzbww5co5) : Session meg1tqiol15dbwehzbww5co5 started 
2022-03-10 14:35:33.8320  INFO (    WebLog meg1tqiol15dbwehzbww5co5) : Authenticating session using RoleBasedADSAccount 
2022-03-10 14:35:34.9986  WARN (    WebLog meg1tqiol15dbwehzbww5co5) : System.Exception: Single-sign-on failed, URL was /ExternalUsers/page.axd?RuntimeFormID=d38b455d-46b0-4f9a-b17b-91bdf6a739fc&aeweb_handler=p&aeweb_rp=&wproj=0&ContextID=VI_Session ---> VI.Base.ViException: Failed to authenticate user. ---> VI.Base.ViException: You are not authorized to use this database.
   at VI.DB.Auth.AdsAccountHelper.<GetPersonDataAsync>d__1.MoveNext()

it sounds as if you anonymous authentication turned on in IIS for this site and this is why the user cannot be determined error previously

Thanks Troy.

I think that the windows authorization works well but there is a issue accessing the site.

2022-03-10 19:32:14.9031  INFO (    WebLog axwmd5df30tv42hphbnihgzs) : Authenticating session using ADSAccount
2022-03-10 19:32:15.9187  WARN (    WebLog axwmd5df30tv42hphbnihgzs) : System.Exception: Single-sign-on failed, URL was /IdentityManager/ ---> VI.Base.ViException: Failed to authenticate user. ---> VI.Base.ViException: You are not authorized to use this database.

I don't understand the message "You are not authorized to use this database". What database?

I would try ADSAccount with manual input/role based set for the primary authentication and confirm that this works first