SAML Login Fails with "Your Single Sign-On attempt failed" due to Disabled Organization

Products

• VMware Cloud Director

Issue/Introduction

When attempting to log into a VMware Cloud Director (VCD) tenant organization using SAML Single Sign-On, the process fails with the following error message in the browser:
"Your Single Sign-On attempt failed."

From the /opt/vmware/vcloud-director/logs/vcloud-container-debug.log, the following entries are seen: 
    com.vmware.ssdc.backendbase.usermanagement.OrganizationDeactivatedException: The organization you are trying to log into has been deactivated.

Environment

VMware Cloud Director 10.6.1.x

Cause

This issue occurs when the target Organization in VMware Cloud Director is in a Disabled state. Even if the SAML assertion from the Identity Provider is valid, VCD will programmatically reject the login attempt because the organization context is not active.

Resolution

To resolve this issue, the organization must be enabled within the VMware Cloud Director portal.

1. Log in to the VMware Cloud Director Provider portal as a System Administrator.
2. Navigate to Resources > Organizations.
3. Locate the affected Organization
4. Check the Status column. If it shows Disabled, select the organization.
5. Click Actions and select Enable.
6. Ensure that the required SAML users or groups are correctly imported into the organization.
Ask the user to clear their browser cache or use an Incognito/Private window to attempt the SAML login again.

Additional Information

If the organization is already enabled but the error persists, verify the following:
• Entity ID Mismatch: Ensure the SAML Entity ID in the VCD Tenant portal exactly matches the Audience ID configured in your Identity Provider (this is case-sensitive) using the Article Error "Your Single Sign-On attempt failed" when logging into an organization with SAML authentication
Public Addresses: Ensure the REST API URL in the VCD Public Addresses configuration is set to the FQDN and not just an IP address.