Unable to login to VMware NSX UI using vIDM (Workspace One) users - Unauthorized "error_code":98

Products

• VMware NSX

Issue/Introduction

Symptoms:

• VMware NSX manager is using vIDM for authentication.
• Authentication with VMware NSX local users work fine.
• Previously the vIDM users were able to authenticate correctly.
• When accessing https://nsx-manager the page is correctly redirect to Workspace ONE for authentication, once the user enters the user name and password from vIDM and press 'Sign In' the page is redirected and the following error is seen:
  {"module_name":"common-service","error_message":"Unauthorized","error_code":98}

Environment

VMware NSX-T Data Center

Resolution

Workaround:

1. 1. Login into the vIDM Admin console > Catalog > Remote App Access
   2. Click on the Client ID used in the NSX vIDM configuration to edit the OAuth Client configuration.
   3. Check the Option Refresh Token and change the Access Token Time-To-Live from 15 min to 960 min.
   4. Save the configuration.
   5. Go to NSX UI, edit the vIDM configuration and re-enter the OAuth Client Secret and hit save.
   6. Revert the changes back to the original value on step 3.

Note: If doesn't work, please open a support request with the VMware vIDM team.