Authentication through vIDM on Aria Operations fails with wrong username or password.

Products

• VMware Aria Suite

Issue/Introduction

Authentication fails with wrong username or password.

In the vIDM horizon.logs:

INFO  (Thread-6) [<vIDM hostname>;-;<IP address>;] com.vmware.horizon.service.controller.auth.LoginController - User not found:
com.vmware.horizon.common.api.components.exceptions.UserNotFoundException: user.not.found at com.tricipher.saas.action.api.impl.AuthenticationServiceImpl.validateFederation(AuthenticationServiceImpl.java:2022) ~[horizon-authentication-0.1.jar:3.3.7.0 Build 21173100]

Environment

Aria Operations 8.x

VMware Identity Manager 3.3.x

Cause

Directory setting does not work correctly when Active Directory is set to LDAP.

Resolution

1. Log into vIDM as admin.
2. Click on the Identity & Access Management and select the Directory Name.
3. Under Directory Name the "Active Directory over LDAP" is selected.  The selection will be grayed out so you cannot select it.
4. Make a note of all the configuration for this Directory.
5. Click the red "Delete Directory" to remove the directory setting.  WARNING:  This will remove the imported users in the directory service.
6. Hit "Delete" to confirm.
7. Click Add Directory and select "Add Active Directory over LDAP/WA.
8. Name the Directory.
9. Select "Active Directory (Integrated Windows Authentication)
10. Fill out the rest of the configuration and click "Test Connection" to verify the settings.
11. Click "Save".
12. From Aria Operations recreate the authentication source.
1. Log in as local admin and go to Administration > Control Panel > Authentication Source
2. Select the vIDM source and click Edit making note of the configuration.
3. Select the vIDM source again and click Delete.
   • Please be aware this will remove imported users and groups associated with the authentication source.
4. Create the vIDM source using the same settings as noted before.
5. Import user/groups with the new vIDM authentication source.
6. Log out of Aria Operations.
7. From the login window select the vIDM as source and click Redirect.
8. After logging in from vIDM it should redirect back to Aria Operations.