Some users unable to login using Windows Biometrics in VMware Identity Manager (vIDM) - AADSTS75011

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

The following error appears when users try to access the VMware Identity Manager through Microsoft Biometrics (fingerprint, face recognition, etc).

Error - AADSTS75011 Authentication method by which the user authenticated with the service doesn't match requested authentication method AuthnContextClassRef

Environment

VMware Identity Manager 3.3.7

Resolution

To resolve the issue, please see the steps as follows:

1. Remove the authentication method urn:oasis:names:tc:SAML:2.0:ac:classes:passwordprotectedTransport under Identity & Access Management > Identity Provider > 3rd Party Integration (Azure).
2. Remove the authentication method from the policy in vIDM as per step 17 in VMware Identity Manager(vIDM 3.3.x) on Azure Active Directory With JIT Provisioning