Login issue with IdentityIQ

Hello All,

We are facing issue while logging to IdentityIQ. getting the below error while logging with userId “SPADMIN”. How to login to identityIQ. We have not done any changes and also having Keystore issue earlier also but we were able to login.

My confusion why SPADMIN logging with AD Authentication it should go internal authentication.

can you give provide solution to bypass this issue.

2025-02-12 16:20:36.194 ERROR [https-openssl-nio-443-exec-7] [sailpoint.connector.ConnectorFactory] [apply] [sailpoint.connector.ConnectorFactory$1.apply(ConnectorFactory.java:247)] - unable to decrypt strings for: domainSettings.password
2025-02-12 16:20:36.220 ERROR [https-openssl-nio-443-exec-7] [sailpoint.server.Authenticator] [authenticateResourceAccount] [sailpoint.server.Authenticator.authenticateResourceAccount(Authenticator.java:716)] - sailpoint.connector.ConnectorException: There is a problem with the keystore installed on this system.

Please help on this.

Regards,
Ravi.

Regards,
Ravi.

this is issue means that you are set\update the password encrypted with different keystore. Try to reset tge pwd via db with the standard encryption 1:p+qvPBo4Rig8PYlNWbr3Zg==

is it possible to reset the password for spadmin in identityiq.spt_identity table

1 Like

if possible can you help me with the query what should default one
what I did is from backend I have spt_configuration login configuration passthrough authentication now






I am getting the below error message

Regards,
Ravi

how to unlock protectedUser?

I just reset the spadmin with the new password, after next login it got encrypted in the database

1 Like

its just an update on spt_identity table on spadmin record

1 Like

not it works? It could be the default password, if you put 1:p+qvPBo4Rig8PYlNWbr3Zg==

What is the error message, don’t see it

Solved: IIQ Console Unable to decrypt strings for password - Compass

check if that work by above approach

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.