Login to VMware Cloud Foundation Operations fails with “Failed to login with VCF SSO service. JWT token is invalid”

Products

• VCF Operations

Issue/Introduction

Users attempting to log in to VMware Cloud Foundation (VCF) Operations using a VCF SSO account may encounter the following authentication error:

“Failed to login with VCF SSO service. JWT token is invalid.” This issue prevents successful authentication and access to the VCF Operations interface.

Environment

VCF Operations 9.0.0
VCF Operations 9.0.1

Cause

The issue occurs because the analytics service within VCF Operations holds an outdated or invalid JWT token. The token is not refreshed automatically, causing authentication to fail when validating VCF SSO credentials.

Resolution

This is a known issue and has been fixed in the upcoming VCF release.

 

As a workaround to resolve the issue, restart the analytics service on all analytics nodes so the JWT token is refreshed.

Option 1: Restart the analytics service via SSH

• SSH to each analytics node in the VCF Operations cluster as the root user.
• Restart the analytics service by running:

  service analytics restart

Option 2: Take the cluster offline and online through the Admin UI

• Log in to the VCF Operations Admin UI as the admin user: (https://<VCF_OPS_FQDN_OR_IP>/admin)
• Click Take Cluster Offline.
  
  
  
  
• Wait until the cluster status shows Offline.
• Click Bring Cluster Online to restart all services, including analytics.
  
  

Once the analytics service restarts, the JWT token is refreshed and login should succeed.

Additional Information

How to Monitor Aria Operations Services Using Command Line Interface (CLI)