Unable to update authentication token error in arcotadmin.log when trying to login to Admin console

Products

• CA Strong Authentication
• CA Advanced Authentication
• CA Risk Authentication

Issue/Introduction

We have two glbladmin account in prod env.(v9.0): glbladmin1 and glbladmin2. I found glbladmin1 can login to adminUI but glbladmin2 cannot.  this admin account do exists in DB. I don't know why the error message is complaining it doesn't exist. I suspect this issue is related to DB failover issue. Here is the logs in arcotadmin.log:

arcotadmin.log
2022-04-18 10:56:54,768 EDT : [http-nio-8080-exec-2] : ERROR : auth.paf.PAFService : [N/A] : [N/A] : [N/A] : [Arcot Admin Console] : [Admin Console] : [] : Administrator 'GLBLADMIN2 (Organization: DEFAULTORG)'  does not exist; unable to update authentication token.
2022-04-18 10:56:54,768 EDT : [http-nio-8080-exec-2] : DEBUG : orgmgmt.impl.OrganizationManagerImpl : [null] : [null] : Request received to get Organization 'DEFAULTORG'
2022-04-18 10:56:54,768 EDT : [http-nio-8080-exec-2] : ERROR : paf.basicauth.BasicAuthManager : [GLBLADMIN2] : [DEFAULTORG] : [N/A] : [Arcot Admin Console] : [Admin Console] : [] : Error while updating the authenticated user: cause::Administrator 'GLBLADMIN2 (Organization: DEFAULTORG)'  does not exist; unable to update authentication token.

Environment

Release : 9.0, 9.1.x

Component : Strong Authentication Admin Console

Resolution

These are the tables which should be looked at for the Admin login process.

1. ARADMINUSER

2. ARUDSUSER

3. ARADMINAUTHTOKEN

4. ARUDSUSER

5. ARADMINAUDITTRAIL

In the above error message the entry in the ARADMINAUTHTOKEN table is missing and that caused the issue. You can use the below query to insert the records. Please modify the values as per your environment.

INSERT INTO ARADMINAUTHTOKEN (USERID, ORGNAME,AUTHTOKEN) VALUES ('GLBLADMIN2','DEFAULTORG','INVALIDATED');