-
Title
Log in to Web portal with AD account fails with "401 Unauthorized" error -
Description
The end user attempts to login using "Active Directory user account (role based)" as the Authentication module. However, when trying to log in to the web portal with Single Sign-On (SSO) with the Active Directory (AD) account, the logs display the following error:
VI.DB.Entities.SessionExpiredException: Your session has expired. Log on again.
401 Unauthorized
Code: Unauthorized, Message: Unauthorized -
Cause
The Service Principle Name (SPN) was not configured for the web host.
-
Resolution
Configure the Service Principal Name (SPN) for the server hosting the web portal as per the following:
Kerberos with Service Principal Name (SPN)If the API server is connecting to the database via the application server then a SPN will need to be created for both the API server and Application server in order for this to work.