When logging in to IT shop, the following error may be received:
"You are not authorized to use this database"
In order to log in to IT Shop with an Employee account use the Employee credentials.
If the AD authentication module for IT Shop has been enabled then login with the ADSAccount credentials, i.e. domain/username (SSO may be used here).
Ensure the proper authentication modules are configured:
Authentication modules are used to define how users should log in to Identity Manager front end tools, as well as the web portal (IT SHop). Users can log in as, for example, Employees with their Active Directory user account, or directly as system users. The authentication module determines which system user is directly or indirectly assigned to the logged in user. This assigns user permissions for the user interface elements of the administration tool that has been started and for the database objects.
To confirm if an AD account is managed verify the setting for "Manage level" on the "General" tab of the master data for the account using Manager. To allow the account to log in the manage level must be "Full Managed".
For detailed information about the One Identity Manager authentication modules, see the One Identity Manager Authorization and Authentication Guide.