Hyperion Planning: MSAD/LDAP Users are Unable to Login into Workspace and other Hyperion Applications, Errror "EPMCSS-00301: Unable To Authenticate Users. Invalid Login Credentials. Please Enter Valid Credentials"
(Doc ID 2458113.1)
Last updated on SEPTEMBER 23, 2020
Applies to:Hyperion Planning - Version 18.104.22.168.005 and later
Information in this document applies to any platform.
All MSAD/LDAP users are unable to login to Workspace and Hyperion applications, Errror "EPMCSS-00301: Unable To Authenticate Users. Invalid Login Credentials. Please Enter Valid Credentials" when trying to log in to Workspace
The error "EPMCSS-00301: Unable To Authenticate Users. Invalid Login Credentials. Please Enter Valid Credentials" can mean that the login credentials are incorrect. However if none of the users can log in the error is likely due to MSAD connection or the service account used for the MSAD account is invalid, locked or password expired. However there can be several external providers added in Shared Services and if a different service accounts are used for each external provider then some users will experience the issue but not all
When no users or individual users are unable to login, the SharedServices_Security.log and SharedServices_Security.log should be reviewed. These logs are located by default in the following directory for Foundation Services
\Oracle\Middleware\user_projects\domains\EPMSystem\servers\FoundationServices0\logs or \Oracle\Middleware\user_projects\domains\EPMSystem\servers\FoundationServicesx\logs if there are multiple Foundation Services installed
The SharedServices_Security.log had the following entries that showed that the service account was locked where LDAP: error code 49 is invalidCredentials and data 775 is "775 user account locked" LDAP code
[2018-10-09T12:41:03.377-04:00] [FoundationServices0] [WARNING] [EPMCSS-10392] [oracle.EPMCSS.CSS] [tid: 39] [userId: <anonymous>] [ecid: 00ipaIjkO9l2BT^_LT^Aye0001EK00062v,1:26484] [APP: WORKSPACE#22.214.171.124] [SRC_CLASS: com.hyperion.css.spi.impl.msad.MSADProvider] [SRC_METHOD: createCache] Cache initialization failed for provider: EGD. EPMCSS-09125: Group cache failed for MSAD user directory EGD. Error executing search. EPMCSS-09120: Failed to initialize group cache for MSAD user directory EGD. Error getting connection. [LDAP: error code 49 - 80090308: LdapErr: DSID-0C09042A, comment: AcceptSecurityContext error, data 775, v3839 ]. Verify MSAD user directory configuration.. Verify MSAD user directory configuration.. No action required.
[2018-10-09T12:41:04.217-04:00] [FoundationServices0] [WARNING] [EPMCSS-10085] [oracle.EPMCSS.CSS] [tid: 35] [userId: <anonymous>] [ecid: 00ipaIjkO9l2BT^_LT^Aye0001EK00062v,1:26479] [APP: WORKSPACE#126.96.36.199] [SRC_CLASS: com.hyperion.css.cache.CacheThread] [SRC_METHOD: buildCache] Group cache building aborted. Failed to build group cache from one of the configured providers. No action required. Existing group cache will be used.
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document