Logon Manager Will Not Start For Users On First Time Usage When Configured For Passphrase Suppresion Using Secure Key

(Doc ID 1378731.1)

Last updated on SEPTEMBER 08, 2017

Applies to:

Oracle Enterprise Single Sign-On Suite Plus - Version to [Release 11g]
Information in this document applies to any platform.


End user enters Windows Domain Credentials and the First Time Use wizard (FTU) appears.  The user then encounters the error

"ESSO-LM cannot initialize your password reset method.  You must be a domain member to use passphrase suppression with a secure key."

despite being logged into the domain.

Under the affected user's Active Directory object, the Passphrase Node "SSORecovery" is not  created.  Other nodes under the user object like SSOProvisioning and SSOSyncState are created.

The error will cease after roughly ten minutes.


Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms