Aria Automation SSO Login Fails After VCF Automation Restore from Backup

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

After restoring a VMware Cloud Foundation (VCF) Automation instance from backup, users are unable to log in to Aria Automation using their configured Single Sign-On (SSO) credentials.

This issue prevents access to the Aria Automation platform post-restore.

The restore VCF Automation procedure documentation can be found in: https://techdocs.broadcom.com/us/en/vmware-cis/vcf/vcf-9-0-and-later/9-0/fleet-management/backup-and-restore-of-cloud-foundation/restore-vcf-automation.html

The vidm-service log files on the Automation appliances show errors similar to the following:

2025-10-16T09:44:24,901 WARN  vidb-service-564f5cdf7b-2cqmf:accesscontrol (ForkJoinPool-5-worker-6) [CUSTOMER;-;192.168.1.1;BBBBBBBB-BBBB-BBBB-BBBB-BBBBBBBBBBBB;-;AAAAAAAA-AAAA-AAAA-AAAA-AAAAAAAAAAAA;authorization_code] com.vmware.vidm.accesscontrol.resource.auth.TokenResource - Failed during issuing token java.util.concurrent.CompletionException: java.util.concurrent.CompletionException: com.vmware.vidm.accesscontrol.exceptions.oauth2.UnauthorizedClientException: oauth2.authorization.credentials.invalid
        at com.vmware.vidm.accesscontrol.resource.auth.TokenResource.lambda$getToken$3(TokenResource.java:351)
        at java.base/java.util.concurrent.CompletableFuture.uniExceptionally(Unknown Source)
        at java.base/java.util.concurrent.CompletableFuture$UniExceptionally.tryFire(Unknown Source)
        at java.base/java.util.concurrent.CompletableFuture.postComplete(Unknown Source)
        at java.base/java.util.concurrent.CompletableFuture.postFire(Unknown Source)
        at java.base/java.util.concurrent.CompletableFuture$UniCompose.tryFire(Unknown Source)
        at java.base/java.util.concurrent.CompletableFuture$Completion.run(Unknown Source)
        at com.vmware.vidm.common.async.ContextPassingExecutor.lambda$wrap$0(ContextPassingExecutor.java:48)
        at io.micrometer.core.instrument.internal.TimedRunnable.run(TimedRunnable.java:49)
        at java.base/java.util.concurrent.ForkJoinTask$RunnableExecuteAction.exec(Unknown Source)
        at java.base/java.util.concurrent.ForkJoinTask.doExec(Unknown Source)
        at java.base/java.util.concurrent.ForkJoinPool$WorkQueue.topLevelExec(Unknown Source)
        at java.base/java.util.concurrent.ForkJoinPool.scan(Unknown Source)
        at java.base/java.util.concurrent.ForkJoinPool.runWorker(Unknown Source)
        at java.base/java.util.concurrent.ForkJoinWorkerThread.run(Unknown Source)
Caused by: java.util.concurrent.CompletionException: com.vmware.vidm.accesscontrol.exceptions.oauth2.UnauthorizedClientException: oauth2.authorization.credentials.invalid
        at java.base/java.util.concurrent.CompletableFuture.encodeThrowable(Unknown Source)
        at java.base/java.util.concurrent.CompletableFuture.completeThrowable(Unknown Source)
        at java.base/java.util.concurrent.CompletableFuture$UniApply.tryFire(Unknown Source)
        ... 12 more
Caused by: com.vmware.vidm.accesscontrol.exceptions.oauth2.UnauthorizedClientException: oauth2.authorization.credentials.invalid
        at com.vmware.vidm.accesscontrol.exceptions.oauth2.UnauthorizedClientException.invalidCredentials(UnauthorizedClientException.java:28)
        at com.vmware.vidm.accesscontrol.OAuth2ClientService.lambda$getValidatedClient$92(OAuth2ClientService.java:919)
        ... 13 more

Environment

VMware Cloud Foundation Automation 9.0

Cause

Due to The OAuth app secret in VCFA and VIDB sync was lost.

Resolution

To resolve the issue, raise a ticket with global support referencing this article number.