Not able to login as portaladmin user in IP after enabling second factor

Products

• CA Identity Suite

Issue/Introduction

After enabling the second factor in Identity Portal Admin Console as shown in the below screenshot

The customer is not able to login using portaladmin user, "Access is denied" error is observed on the browser webpage.

Environment

Release : 14.3, 14.4

Component : CA Identity Suite Virtual Appliance

Resolution

Modify the following two entrykeys 'Second Factor Enabled', 'Require Second Factor On Login' to false (since they are set as true after enabling the checkboxes in second factor from IP Admin Console) and the portaladmin user login will work without issues.

Please take help from your SQL DB admin to run the following queries in IP database:
Update CONFIGURATION SET ENTRYVALUE='false' where ENTRYKEY='Second Factor Enabled';
Update CONFIGURATION SET ENTRYVALUE='false' where ENTRYKEY='Require Second Factor On Login';

Additional Information

For configuring Advanced Authentication, please check the below documentation:
https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/identity-portal/14-3/administrating/administrating-ca-identity-portal/ca-identity-portal-administration/elements/security/configure-advanced-authentication-settings.html