AD credentials login to VCF components is not working

Products

• VCF Operations

Issue/Introduction

• VCF Operations has been integrated with AD via vIDB as per Configure Active Directory as an Identity Provider Using AD/LDAP
• Roles and permissions have been assigned to an AD group on each component as per Assigning Roles and Permissions
• Users are unable to authenticate to VMware Aria Operations, NSX, and vCenter using VCF SSO accounts.
• The following error is received;

  • Authentication was unsuccessful. Verify your credentials or contact your administrator if the issue persists.

Environment

VCF Operations 9.0

Cause

• A specific user was not present in imported Active Directory group.
• The imported Active Directory group had not been assigned the necessary service roles as per Configure VCF Single Sign-On for NSX and vCenter.

Resolution

1. Ensure that the user is added to one of the groups which has been synced and is displayed in the VCF Operations UI, Fleet Management >> Identity & Access >> VCF Instance >> Identity Source (Edit) >> Group Provisioning
2. Login to each component (vCenter / NSX) with the local admin account and assign the necessary service roles to the provisioned users and groups as per Configure VCF Single Sign-On for NSX and vCenter