SDDC Manager UI login fails with "Identity Internal Server Error:500"

Products

• VMware SDDC Manager

Issue/Introduction

• Login to SDDC Manager UI fails with the error:
  {"message":"Identity Internal Server Error","code":"IDENTITY_INTERNAL_SERVER_ERROR","status":500}
   
• Password health shows "Failed to get details".
  /opt/vmware/sddc-support/sos --password-health --domain-name ALL

SDDC: <sddc_manager>  |  vcf  |  <date>  | <date>  | GREEN
vCenter: <vCenter>  |  root  |  <date>  | <date>  | Failed to get details


• Logs show credential issue:
  cat /var/log/vmware/vcf/commonsvcs/vcf-commonsvcs.log |grep -i credentials

####-##-##T##:##:##.###+#### ERROR [common, ###################################, ####] [c.v.e.s.c.c.v.vsphere.VcManagerBase,####] Cannot complete login due to incorrect credentials: <mgmt_vCenter>, <svc_account>@vsphere.local.

Environment

VMware Cloud Foundation 5.x

Cause

Login attempts failed due to incorrect credentials for the management vCenter account and the service account <svc_account>@vsphere.local, causing an identity service internal error.

Resolution

• Obtain the service account credentials (secret) by following the below KB
  Retrieve the service accounts credentials from SDDC Manager
  • Note:- output "secret" is the password that VCF is trying to use.  
• Update account in vCenter with the password you obtained following the KB.
  • Log into vCenter UI.
  • Click on the Menu at the top left and select Administration.
  • Under "Single Sign On" click on "Users and Groups".  
  • On the drop down to select the domain, select "vsphere.local".
  • Find the service account that has the issue and select it.
  • Click Edit and input the password you obtained following above KB.
• Restart the SDDC services using the command : /opt/vmware/vcf/operationsmanager/scripts/cli/sddcmanager_restart_services.sh