When the primary EEM server becomes unavailable, users are unable to login to WCC and WAAE Client Utilities start receiving authentication errors that were not occurring before the EEM failover. WAAE and WCC have both EEM servers listed in their EEM configuration. Therefore, there should be no interruption when an EEM failover occurs.
This will occur if not all of the EEM servers in an EEM failover environment have matching user store configurations. For example, the primary EEM server has the user store configured for LDAP but a secondary EEM server has a local user store configuration that does not contain the ldap users that are generating the authentication requests via WCC and WAAE Client Utilities.
Ensure all EEM servers in an EEM failover environment have the same user store configuration. This configuration does not automatically propagate to all EEM servers in a failover environment like policy or other configuration changes. If the user store configuration is changed on one EEM server, the same change must be made manually on the others.