"You are not authorized" message when inputting incorrect credentials (4373202)

"You are not authorized" message when inputting incorrect credentials

Normally the error "You are not authorized to use this database" is displayed if the login account is unmanaged, or there is a problem connecting to Active Directory.

However in one scenario - when logging in to the IT Shop using an Active Directory authentication module - "You are not authorized" will be displayed when an incorrect password is input. This can cause confusion for end-users who expect to see a "username or password is incorrect" error.
 

This is by design, for security reasons. If a malicious actor were trying to brute-force access the web portal, displaying the "username or password is incorrect" error would indicate that they had found a valid Active Directory account. This could compromise the security not only of Identity Manager but of the company Active Directory.

For this reason we display the generic "You are not authorized to use this database" error in all failed login attempts using Active Directory authentication. It is not possible to override or change this.