After upgrading to Password Manager 5.16, 5.17, or 5.18, the PMAdmin site fails to login after 30+ seconds with the error:
Authentication Failed
The credential used is a member of the local administrators group and the local PMAdmins group via nested group memberships.
The Password Manager host is joined to a domain with multiple trusts.
There was a functional change in Password Manager 5.16, 5.17, and 5.18 related to how groups are resolved by the PMAdmin site.
The new method has a hard-coded 30 second timeout, which can be exceeded in some configurations.
This issue is being tracked as Defect ID 710349.
WORKAROUND 1
Do not use group memberships to grant access and have the PMAdmin credential be a direct member of the local Administrators and local PMAdmin groups.
WORKAROUND 2
Use a dedicated PMAdmin login account that is a member only of the PMAdmin local group, along with any groups required to grant local Administrator rights on the Password Manager server.
STATUS
Waiting for fix in a future release of Password Manager.
© 2026 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center