Unable to login with test Identity

IdentityIQ (IIQ) IIQ Discussion and Questions
, , , , , , ,
1

Hi all,

I am trying to check what a capability does for an identity. I changed the password from DEBUG for an identity but cannot login with the identity with the same password
I get the below error:

Note that I was able to login a few minutes before this

image
image1452×264 18.5 KB

And where is this message configured. I might want to change it

Thanks in advance

2

What does your login configuration look like?

And is this identity locked?

3

@robert-hails Login configuration has detailed selected.
How do I verify if the identity is locked?

4

Hi @rishavghoshacc,

are you getting this error in a particular browser like IE, can you try in chrome if you are getting the same error. inorder to check whether the identity is locked or not you can login to IIQ console and check if lock exists on identity or not or via debug page you can check

easy way is: go to debug, search the identity and on the first line of xml you can find a key called lock wit an id/number, like this:
image

5

Hi @rishavghoshacc ,
You should not change the password in debug mode, as it will be stored in decrypted form. For which user did you change the password?. did you have decrypted value or plain text.

6

Is this native IIQ login? Or pass through?

7

@robert-hails Native

8

@narayanag This has worked for me multiple times in the past. It suddenly did this

9

try to Change a user’s IdentityIQ password from Identity Warehouse.

Resetting IdentityIQ Internal Passwords - SailPoint IdentityIQ

10

@rishavghoshacc is this issue still there? and how did you change the password, directly updating the password value in debug?

Have you tried resetting from the Identity Warehouse and login back with new password?

11

@neel193 Yes its still there. I tried changing the password form BEDUG and warehouse

12

@rishavghoshacc Can you please share the identity xml of the user which you are trying? First few lines till attributes map should be enough.

13

qq, are you trying with identity name or samAccountName ? if you have to login with sailpoint password then we have to use username.

14

When you say you change the password from debug page, did you added encrypted password?

15

Hi @rishavghoshacc Share login configuration. Is pass-through authentication enabled? If pass-through authentication is enabled, you should change the password in LDAP or AD.

It’s better to share a login setting.

Thanks,

PVR.

16

Found out the issue. Seems if the Identity is disabled in IIQ, it does not let you login. Once I activated the identity, I was able to login