Hyperion Planning: MSAD/LDAP Users are Unable to Login into Workspace and other Hyperion Applications, Errror "EPMCSS-00301: Unable To Authenticate Users. Invalid Login Credentials. Please Enter Valid Credentials" (Doc ID 2458113.1)

Last updated on FEBRUARY 29, 2024

Applies to:

Symptoms

All MSAD/LDAP users are unable to login to Workspace and Hyperion applications, Errror "EPMCSS-00301: Unable To Authenticate Users. Invalid Login Credentials. Please Enter Valid Credentials" when trying to log in to Workspace 

The error "EPMCSS-00301: Unable To Authenticate Users. Invalid Login Credentials. Please Enter Valid Credentials" can mean that the login credentials are incorrect. However if none of the users can log in the error is likely due to MSAD connection or the service account used for the MSAD account is invalid, locked or password expired. However there can be several external providers added in Shared Services and if a different service accounts are used for each  external provider then some users will experience the issue but not all 

When no users or individual users are unable to login, the SharedServices_Security.log and SharedServices_Security.log should be reviewed.  These logs are located by default in the following directory for Foundation Services

\Oracle\Middleware\user_projects\domains\EPMSystem\servers\FoundationServices0\logs or \Oracle\Middleware\user_projects\domains\EPMSystem\servers\FoundationServicesx\logs if there are multiple Foundation Services installed

The SharedServices_Security.log had the following entries that showed that the service account was locked where LDAP: error code 49 is invalidCredentials and data 775 is "775 user account locked" LDAP code

[2018-10-09T12:41:03.377-04:00] [FoundationServices0] [WARNING] [EPMCSS-10392] [oracle.EPMCSS.CSS] [tid: 39] [userId: <anonymous>] [ecid: <ECID>] [APP: WORKSPACE#11.1.2.0] [SRC_CLASS: com.hyperion.css.spi.impl.msad.MSADProvider] [SRC_METHOD: createCache] Cache initialization failed for provider: EGD. EPMCSS-09125: Group cache failed for MSAD user directory EGD. Error executing search. EPMCSS-09120: Failed to initialize group cache for MSAD user directory EGD. Error getting connection. [LDAP: error code 49 - 80090308: LdapErr: DSID-0C09042A, comment: AcceptSecurityContext error, data 775, v3839 ]. Verify MSAD user directory configuration.. Verify MSAD user directory configuration.. No action required.
[2018-10-09T12:41:04.217-04:00] [FoundationServices0] [WARNING] [EPMCSS-10085] [oracle.EPMCSS.CSS] [tid: 35] [userId: <anonymous>] [ecid: <ECID>] [APP: WORKSPACE#11.1.2.0] [SRC_CLASS: com.hyperion.css.cache.CacheThread] [SRC_METHOD: buildCache] Group cache building aborted. Failed to build group cache from one of the configured providers. No action required. Existing group cache will be used.

Changes

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.