"Unable to authenticate. Missing authorization code" error in vRA

Products

• VMware Aria Suite

Issue/Introduction

Symptoms:

• Newly added domain accounts are unable to log in to vRealize Automation.
• In /storage/log/vmware/vcac/catalina.out logs, you see entries similar to:
  
  [component="cafe:shell" priority="WARN" thread="tomcat-http--25" tenant="tenantname" context token] com.vmware.vcac.authentication.http.oauth.WebOAuthAuthenticationFilter.handleException:120 – Authentication request for '/vcac/' failed with: Unable to authenticate. Missing authorization code
  

Note: The preceding log excerpts are only examples. Date, time, and environmental variables may vary depending on your environment.

Environment

VMware vRealize Automation 7.0.x

Cause

This issue occurs if the newly added accounts user id match with the id of locally created vRealize Automation account ( @vsphere.local).

Resolution

To resolve this issue:

1. Remove the locally created accounts for the affected users.
2. Authenticate the users only with their domain accounts.

Additional Information

To be alerted when this document is updated, click the Subscribe to Article link in the Actions box..