-
Title
Login error: "You are not authorized to use this database" when logging in to IT Shop -
Description
When logging in to IT shop, the following error may be received:
"You are not authorized to use this database" -
Cause
Attempting to login with an Active Directory (AD) account - AD Authentication is not enabled for ITShop.
This error can also occur if the AD account being used is unmanaged. And will occur if the Active Directory user account is in a domain that is untrusted by the domain where the web server resides. See Knowledge Article 137932, Cannot authenticate to web portal from an untrusted domain. -
Resolution
In order to log in to IT Shop with an Employee account use the Employee credentials.
If the AD authentication module for IT Shop has been enabled then login with the ADSAccount credentials, i.e. domain/username (SSO may be used here).
Ensure the proper authentication modules are configured:
Authentication modules are used to define how users should log in to Identity Manager front end tools, as well as the web portal (IT SHop). Users can log in as, for example, Employees with their Active Directory user account, or directly as system users. The authentication module determines which system user is directly or indirectly assigned to the logged in user. This assigns user permissions for the user interface elements of the administration tool that has been started and for the database objects.
To confirm if an AD account is managed verify the setting for "Manage level" on the "General" tab of the master data for the account using Manager. To allow the account to log in the manage level must be "Full Managed".
For detailed information about the One Identity Manager authentication modules, see the One Identity Manager Authorization and Authentication Guide.