Error: AcceptSecurityContext returned 0x80090311 in CA Access Gateway (SPS)

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign-On
• CA Single Sign On Agents (SiteMinder)
• SITEMINDER

Issue/Introduction

Implementing a configuration for Windows Authentication on CA Access Gateway (SPS), and this one doesn't work and the SPS Agent reports the error:

[SmNtc::getCredentials][Request for SSPI NTLM with Safari browser Authentication]
[CSmSSPIServer::getCredentialsNTLMAuth][ SMNTLMCOOKIE TYPE 3 ]
[CSmSSPIServer::processNTLMRequest][AcceptSecurityContext returned : 0x80090311]
[CSmSSPIServer::getCredentialsNTLMAuth][processNTLMRequest Type 3 failed with -2146893039. Re-requesting for authentication]

 

Cause

The CA Access Gateway (SPS) Agent reports this error as it cannot get the NTLM token from the browser.

 

Resolution

Configure the Browser for automatically logon with current username and password to solve the issue.