Error: Incorrect username/password due to expired Active Directory account

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• AD users see "Incorrect username/password" in Aria Operations UI when logging in.
• /storage/vcops/loganalytics.audit-<uuid>.log shows Log in failed. Due to the following error: "Invalid credentials".
• vIDM logins (e.g. through VRA) report "Password has expired."

Environment

Aria Operations 8.18.x

Cause

The Active Directory account has the attribute User must change password at next logon enabled, or the password has reached its maximum age. Aria Operations cannot process the interactive password-change request.

Resolution

1. Reset the password in Active Directory.
2. Clear the "User must change password at next logon" checkbox.
3. Confirm the user can log in to a standard domain service (e.g., Windows Desktop or OWA) without a password change prompt before retrying login to Aria Operations.