Integration of Workspace One with Aria Operations for Logs fails with error "Unable to authorize to Workspace ONE Access instance with provided credentials."

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• Integrating Workspace One with AD user is failing with error "Unable to authorize to Workspace ONE Access instance with provided credentials."
• Error in the /storage/core/loginsight/var/runtime.log in Aria Operations for Logs is similar to "Authentication fails: wrong credential provided, or the user is not the tenant admin. :: Invalid credentials or Password locked. Received unexpected response from Workspace ONE Access instance."
• Previously had Ops for Logs integrated with WOA, but it is now showing disconnected
• From Aria Operations for Logs cluster nodes, running command: curl -v telnet://<WOA_Load_Balancer_fqdn>:443 results in successful connection

Environment

Aria Operations for Logs 8.18.x

 

Cause

• Workspace one integration can be done only with local users. Active Directory users who are assigned a tenant admin role is not eligible for integration.
• The admin (port 443) local admin account for vIDM 3.3.x is locked or password expired 

Resolution

• Configure the Workspace one integration with a local user 
• If using local admin for the integration, follow VMware Workspace One Access and IDM, resetting admin and configurator passwords to reset the password for admin (port 443) account

Additional Information

https://techdocs.broadcom.com/content/dam/broadcom/techdocs/us/en/pdf/vmware/aria/aria-operations-logs/vmware-aria-operations-for-logs-8-18.pdf