I saw your message in my inbox saying that logging in to the IdP namespace then the AD namespace worked - thanks for the update. Bizarrely, it won't allow me to reply to your message.
Original Message:
Sent: Wed July 03, 2024 11:01 AM
From: Mark Fry
Subject: Navigating Multi-Factor Authentication (IdP) namespace
Interesting! What happens if you log in first to the IdP namespace, then try to log in afterwards to the Active Directory namespace? Do you see the same issue?
MF.
------------------------------
Mark Fry
Technical Consultant
Original Message:
Sent: Wed July 03, 2024 10:55 AM
From: Elizabeth Johnson
Subject: Navigating Multi-Factor Authentication (IdP) namespace
I received the same error message after clearing the cache. The original name space was 'Active Directory' and the new one is 'IdP'.
------------------------------
Elizabeth Johnson
Original Message:
Sent: Wed July 03, 2024 10:02 AM
From: Mark Fry
Subject: Navigating Multi-Factor Authentication (IdP) namespace
Can you confirm that you do have two separate namespaces (not just one)? If you do, I would try logging out, close your browser, clear the cache, then try logging in again to both namespaces.
Cheers!
MF.
------------------------------
Mark Fry
Technical Consultant
Original Message:
Sent: Wed July 03, 2024 09:57 AM
From: Elizabeth Johnson
Subject: Navigating Multi-Factor Authentication (IdP) namespace
When I tried to sign in I get the following error: AAA-AUT-0013 The user is already authenticated in all available namespaces.
Is there any way to get around this?
Thanks,
------------------------------
Elizabeth Johnson
Original Message:
Sent: Wed July 03, 2024 09:38 AM
From: Mark Fry
Subject: Navigating Multi-Factor Authentication (IdP) namespace
Is your user signed in to the provider used for the MFA users? If it's a different namespace, you will need to sign in twice - once to the "normal" authentication provider (which I'm assuming gives you your System Admin privileges), then without signing out, sign in a second time to the new MFA provider. You should then be able to navigate into the MFA namespace to allocate the users/groups to the Cognos roles.
Cheers!
MF.
------------------------------
Mark Fry
Technical Consultant
Original Message:
Sent: Wed July 03, 2024 09:13 AM
From: Elizabeth Johnson
Subject: Navigating Multi-Factor Authentication (IdP) namespace
We are currently trying to set-up Multi-Factor Authentication (idp) in Cognos. I was able to get the sign in to work, but the new users have no permissions. When I went to try to add the new IdP users to the Cognos roles to give the new users access, I am unable to navigate the namespace to pull users in.
Does anyone know how to add IdP users to Cognos roles?
Thanks,
------------------------------
Elizabeth Johnson
------------------------------