I am trying to implement MFA using IBM Verify App, I am receiving FBTMFA004E There was no authenticator found for the given access token when I tried to register my device.
1. Access URL
https://<Hostname>/mga/sps/mga/user/mgmt/html/device/device_selection.html2. Enter credentials at the login portal
3. Click on Register new authenticator
4. Scan the QR Code
5. On the mobile app message received "There was no authenticator found for the given access token when I tried to register my device."
trace.log
[10/19/19 13:47:21:882 EDT] 000036e2 id= com.ibm.isam.scim.mmfa.AuthenticatorScimlet > getTokenFromRequest ENTRY[10/19/19 13:47:21:882 EDT] 000036e2 id= com.ibm.isam.scim.mmfa.AuthenticatorScimlet > getTokenFromRequest ENTRY[10/19/19 13:47:21:882 EDT] 000036e2 id= com.ibm.isam.scim.mmfa.AuthenticatorScimlet < getTokenFromRequest RETURN[10/19/19 13:47:21:882 EDT] 000036e2 id= com.tivoli.am.fim.mmfa.utils.AuthenticatorCleanupHelper > getInstance ENTRY[10/19/19 13:47:21:882 EDT] 000036e2 id= com.tivoli.am.fim.mmfa.utils.AuthenticatorCleanupHelper < getInstance RETURN com.tivoli.am.fim.mmfa.utils.AuthenticatorCleanupHelper@6b9462a4[10/19/19 13:47:21:882 EDT] 000036e2 id= com.tivoli.am.fim.mmfa.utils.AuthenticatorCleanupHelper > startCleanupThread ENTRY[10/19/19 13:47:21:882 EDT] 000036e2 id= com.tivoli.am.fim.mmfa.utils.AuthenticatorCleanupHelper < startCleanupThread RETURN Thread[Thread-75,5,Default Executor Thread Group][10/19/19 13:47:21:882 EDT] 000036e2 id= com.tivoli.am.fim.mmfa.authenticator.AuthenticatorManager > getAuthenticatorByAccess ENTRY vevemula[10/19/19 13:47:21:882 EDT] 000036e2 id= com.tivoli.am.fim.utils.sql.DataSourceWithRetry > getConnection() ENTRY[10/19/19 13:47:21:883 EDT] 000036e2 id= com.tivoli.am.fim.utils.sql.DataSourceWithRetry < getConnection() RETURN[10/19/19 13:47:21:883 EDT] 000036e2 id= com.tivoli.am.fim.mmfa.authenticator.AuthenticatorManager > rollback ENTRY[10/19/19 13:47:21:883 EDT] 000036e2 id= com.tivoli.am.fim.mmfa.authenticator.AuthenticatorManager < rollback RETURN[10/19/19 13:47:21:884 EDT] 000036e2 id= com.tivoli.am.fim.mmfa.authenticator.AuthenticatorManager I getAuthenticatorByAccess com.tivoli.am.fim.mmfa.exception.MMFATokenNotFoundException: FBTMFA004E There was no authenticator found for the given access token. at com.tivoli.am.fim.mmfa.authenticator.AuthenticatorManager.getAuthenticatorByAccess(AuthenticatorManager.java:354) at com.ibm.isam.scim.mmfa.AuthenticatorScimlet.updateOrCreateAuthMethods(AuthenticatorScimlet.java:613) at com.ibm.isam.scim.mmfa.AuthenticatorScimlet.handlePatch(AuthenticatorScimlet.java:854) at com.ibm.isam.scim.ScimResourceServlet.doPatchWithPath(ScimResourceServlet.java:1363) at com.ibm.isam.scim.ScimResourceServlet.doPatch(ScimResourceServlet.java:1186) at com.ibm.isam.scim.ScimServlet.service(ScimServlet.java:171) at javax.servlet.http.HttpServlet.service(HttpServlet.java:790) at com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWrapper.java:1290) at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:778) at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:475) at com.ibm.ws.webcontainer.filter.WebAppFilterChain.invokeTarget(WebAppFilterChain.java:148) at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:94) at com.ibm.isam.core.security_filter.SecurityFilter.doFilter(SecurityFilter.java:231) at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java:207) at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:91) at com.ibm.isam.core.tenant_filter.TenantFilter.doFilter(TenantFilter.java:260) at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java:207) at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:91) at com.ibm.ws.webcontainer.filter.WebAppFilterManager.doFilter(WebAppFilterManager.java:1021) at com.ibm.ws.webcontainer.filter.WebAppFilterManager.invokeFilters(WebAppFilterManager.java:1143) at com.ibm.ws.webcontainer.servlet.CacheServletWrapper.handleRequest(CacheServletWrapper.java:82) at com.ibm.ws.webcontainer.WebContainer.handleRequest(WebContainer.java:956) at com.ibm.ws.webcontainer.osgi.DynamicVirtualHost$2.run(DynamicVirtualHost.java:280) at com.ibm.ws.http.dispatcher.internal.channel.HttpDispatcherLink$TaskWrapper.run(HttpDispatcherLink.java:967) at com.ibm.ws.http.dispatcher.internal.channel.HttpDispatcherLink.wrapHandlerAndExecute(HttpDispatcherLink.java:359) at com.ibm.ws.http.dispatcher.internal.channel.HttpDispatcherLink.ready(HttpDispatcherLink.java:318) at com.ibm.ws.http.channel.internal.inbound.HttpInboundLink.handleDiscrimination(HttpInboundLink.java:471) at com.ibm.ws.http.channel.internal.inbound.HttpInboundLink.handleNewRequest(HttpInboundLink.java:405) at com.ibm.ws.http.channel.internal.inbound.HttpInboundLink.processRequest(HttpInboundLink.java:285) at com.ibm.ws.http.channel.internal.inbound.HttpInboundLink.ready(HttpInboundLink.java:256) at com.ibm.ws.channel.ssl.internal.SSLConnectionLink.determineNextChannel(SSLConnectionLink.java:1043) at com.ibm.ws.channel.ssl.internal.SSLConnectionLink.readyInboundPostHandshake(SSLConnectionLink.java:709) at com.ibm.ws.channel.ssl.internal.SSLConnectionLink$MyHandshakeCompletedCallback.complete(SSLConnectionLink.java:397) at com.ibm.ws.channel.ssl.internal.SSLUtils.handleHandshake(SSLUtils.java:967) at com.ibm.ws.channel.ssl.internal.SSLHandshakeIOCallback.complete(SSLHandshakeIOCallback.java:88) at com.ibm.ws.tcpchannel.internal.WorkQueueManager.requestComplete(WorkQueueManager.java:504) at com.ibm.ws.tcpchannel.internal.WorkQueueManager.attemptIO(WorkQueueManager.java:574) at com.ibm.ws.tcpchannel.internal.WorkQueueManager.workerRun(WorkQueueManager.java:929) at com.ibm.ws.tcpchannel.internal.WorkQueueManager$Worker.run(WorkQueueManager.java:1018) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1160) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635) at java.lang.Thread.run(Thread.java:811)
[10/19/19 13:47:21:884 EDT] 000036e2 id= com.tivoli.am.fim.mmfa.authenticator.AuthenticatorManager > close ENTRY[10/19/19 13:47:21:884 EDT] 000036e2 id= com.tivoli.am.fim.mmfa.authenticator.AuthenticatorManager < close RETURN[10/19/19 13:47:21:884 EDT] 000036e2 id= com.tivoli.am.fim.mmfa.authenticator.AuthenticatorManager < getAuthenticatorByAccess RETURN[10/19/19 13:47:21:884 EDT] 000036e2 id= com.ibm.isam.scim.common.BaseScimlet E handlePatch : Caught Exception : com.tivoli.am.fim.mmfa.exception.MMFATokenNotFoundException: FBTMFA004E There was no authenticator found for the given access token.[10/19/19 13:47:21:884 EDT] 000036e2 id= com.ibm.isam.scim.mmfa.AuthenticatorScimlet < handlePatch RETURN[10/19/19 13:47:21:884 EDT] 000036e2 id= SystemErr R java.util.MissingResourceException: Can't find resource for bundle com.ibm.isam.scim.i18n.ScimMessages, key FBTMFA004E There was no authenticator found for the given access token.[10/19/19 13:47:21:885 EDT] 000036e2 id= SystemErr R at java.util.ResourceBundle.getObject(ResourceBundle.java:461)[10/19/19 13:47:21:885 EDT] 000036e2 id= SystemErr R at java.util.ResourceBundle.getString(ResourceBundle.java:418)[10/19/19 13:47:21:885 EDT] 000036e2 id= SystemErr R at com.ibm.isam.scim.i18n.I18n.translate(I18n.java:57)[10/19/19 13:47:21:885 EDT] 000036e2 id= SystemErr R at com.ibm.isam.scim.ScimServletException.buildResponse(ScimServletException.java:111)[10/19/19 13:47:21:885 EDT] 000036e2 id= SystemErr R at com.ibm.isam.scim.ScimServlet.service(ScimServlet.java:188)[10/19/19 13:47:21:886 EDT] 000036e2 id= SystemErr R at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)[10/19/19 13:47:21:886 EDT] 000036e2 id= SystemErr R at com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWrapper.java:1290)[10/19/19 13:47:21:886 EDT] 000036e2 id= SystemErr R at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:778)[10/19/19 13:47:21:886 EDT] 000036e2 id= SystemErr R at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:475)[10/19/19 13:47:21:887 EDT] 000036e2 id= SystemErr R at com.ibm.ws.webcontainer.filter.WebAppFilterChain.invokeTarget(WebAppFilterChain.java:148)[10/19/19 13:47:21:887 EDT] 000036e2 id= SystemErr R at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:94)[10/19/19 13:47:21:887 EDT] 000036e2 id= SystemErr R at com.ibm.isam.core.security_filter.SecurityFilter.doFilter(SecurityFilter.java:231)[10/19/19 13:47:21:887 EDT] 000036e2 id= SystemErr R at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java:207)[10/19/19 13:47:21:887 EDT] 000036e2 id= SystemErr R at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:91)[10/19/19 13:47:21:888 EDT] 000036e2 id= SystemErr R at com.ibm.isam.core.tenant_filter.TenantFilter.doFilter(TenantFilter.java:260)[10/19/19 13:47:21:888 EDT] 000036e2 id= SystemErr R at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java:207)[10/19/19 13:47:21:888 EDT] 000036e2 id= SystemErr R at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:91)[10/19/19 13:47:21:888 EDT] 000036e2 id= SystemErr R at com.ibm.ws.webcontainer.filter.WebAppFilterManager.doFilter(WebAppFilterManager.java:1021)[10/19/19 13:47:21:889 EDT] 000036e2 id= SystemErr R at com.ibm.ws.webcontainer.filter.WebAppFilterManager.invokeFilters(WebAppFilterManager.java:1143)[10/19/19 13:47:21:889 EDT] 000036e2 id= SystemErr R at com.ibm.ws.webcontainer.servlet.CacheServletWrapper.handleRequest(CacheServletWrapper.java:82)[10/19/19 13:47:21:889 EDT] 000036e2 id= SystemErr R at com.ibm.ws.webcontainer.WebContainer.handleRequest(WebContainer.java:956)[10/19/19 13:47:21:889 EDT] 000036e2 id= SystemErr R at com.ibm.ws.webcontainer.osgi.DynamicVirtualHost$2.run(DynamicVirtualHost.java:280)[10/19/19 13:47:21:889 EDT] 000036e2 id= SystemErr R at com.ibm.ws.http.dispatcher.internal.channel.HttpDispatcherLink$TaskWrapper.run(HttpDispatcherLink.java:967)[10/19/19 13:47:21:890 EDT] 000036e2 id= SystemErr R at com.ibm.ws.http.dispatcher.internal.channel.HttpDispatcherLink.wrapHandlerAndExecute(HttpDispatcherLink.java:359)[10/19/19 13:47:21:890 EDT] 000036e2 id= SystemErr R at com.ibm.ws.http.dispatcher.internal.channel.HttpDispatcherLink.ready(HttpDispatcherLink.java:318)[10/19/19 13:47:21:890 EDT] 000036e2 id= SystemErr R at com.ibm.ws.http.channel.internal.inbound.HttpInboundLink.handleDiscrimination(HttpInboundLink.java:471)[10/19/19 13:47:21:890 EDT] 000036e2 id= SystemErr R at com.ibm.ws.http.channel.internal.inbound.HttpInboundLink.handleNewRequest(HttpInboundLink.java:405)[10/19/19 13:47:21:891 EDT] 000036e2 id= SystemErr R at com.ibm.ws.http.channel.internal.inbound.HttpInboundLink.processRequest(HttpInboundLink.java:285)[10/19/19 13:47:21:891 EDT] 000036e2 id= SystemErr R at com.ibm.ws.http.channel.internal.inbound.HttpInboundLink.ready(HttpInboundLink.java:256)[10/19/19 13:47:21:891 EDT] 000036e2 id= SystemErr R at com.ibm.ws.channel.ssl.internal.SSLConnectionLink.determineNextChannel(SSLConnectionLink.java:1043)[10/19/19 13:47:21:891 EDT] 000036e2 id= SystemErr R at com.ibm.ws.channel.ssl.internal.SSLConnectionLink.readyInboundPostHandshake(SSLConnectionLink.java:709)[10/19/19 13:47:21:891 EDT] 000036e2 id= SystemErr R at com.ibm.ws.channel.ssl.internal.SSLConnectionLink$MyHandshakeCompletedCallback.complete(SSLConnectionLink.java:397)[10/19/19 13:47:21:892 EDT] 000036e2 id= SystemErr R at com.ibm.ws.channel.ssl.internal.SSLUtils.handleHandshake(SSLUtils.java:967)[10/19/19 13:47:21:892 EDT] 000036e2 id= SystemErr R at com.ibm.ws.channel.ssl.internal.SSLHandshakeIOCallback.complete(SSLHandshakeIOCallback.java:88)[10/19/19 13:47:21:892 EDT] 000036e2 id= SystemErr R at com.ibm.ws.tcpchannel.internal.WorkQueueManager.requestComplete(WorkQueueManager.java:504)[10/19/19 13:47:21:892 EDT] 000036e2 id= SystemErr R at com.ibm.ws.tcpchannel.internal.WorkQueueManager.attemptIO(WorkQueueManager.java:574)[10/19/19 13:47:21:893 EDT] 000036e2 id= SystemErr R at com.ibm.ws.tcpchannel.internal.WorkQueueManager.workerRun(WorkQueueManager.java:929)[10/19/19 13:47:21:893 EDT] 000036e2 id= SystemErr R at com.ibm.ws.tcpchannel.internal.WorkQueueManager$Worker.run(WorkQueueManager.java:1018)[10/19/19 13:47:21:893 EDT] 000036e2 id= SystemErr R at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1160)[10/19/19 13:47:21:893 EDT] 000036e2 id= SystemErr R at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)[10/19/19 13:47:21:894 EDT] 000036e2 id= SystemErr R at java.lang.Thread.run(Thread.java:811)[10/19/19 13:47:42:009 EDT] 000036e4 id= oli.am.fim.ws.oidc.tai.OIDCTrustAssociationInterceptorOnPrem > isTargetInterceptor(HttpServletRequest) ENTRY[10/19/19 13:47:42:009 EDT] 000036e4 id= oli.am.fim.ws.oidc.tai.OIDCTrustAssociationInterceptorOnPrem 2 isTargetInterceptor(HttpServletRequest) Request URI: /TrustServerWS/SecurityTokenServiceWST13[10/19/19 13:47:42:009 EDT] 000036e4 id= oli.am.fim.ws.oidc.tai.OIDCTrustAssociationInterceptorOnPrem < isTargetInterceptor(HttpServletRequest) RETURN false[10/19/19 13:47:43:011 EDT] 000036dd id= oli.am.fim.ws.oidc.tai.OIDCTrustAssociationInterceptorOnPrem > isTargetInterceptor(HttpServletRequest) ENTRY[10/19/19 13:47:43:012 EDT] 000036dd id= oli.am.fim.ws.oidc.tai.OIDCTrustAssociationInterceptorOnPrem 2 isTargetInterceptor(HttpServletRequest) Request URI: /rtss/authz/services/AuthzService[10/19/19 13:47:43:012 EDT] 000036dd id= oli.am.fim.ws.oidc.tai.OIDCTrustAssociationInterceptorOnPrem < isTargetInterceptor(HttpServletRequest) RETURN false[10/19/19 13:47:50:009 EDT] 000036d9 id= oli.am.fim.ws.oidc.tai.OIDCTrustAssociationInterceptorOnPrem > isTargetInterceptor(HttpServletRequest) ENTRY[10/19/19 13:47:50:009 EDT] 000036d9 id= oli.am.fim.ws.oidc.tai.OIDCTrustAssociationInterceptorOnPrem 2 isTargetInterceptor(HttpServletRequest) Request URI: /rtss/authz/services/AuthzService[10/19/19 13:47:50:009 EDT] 000036d9 id= oli.am.fim.ws.oidc.tai.OIDCTrustAssociationInterceptorOnPrem < isTargetInterceptor(HttpServletRequest) RETURN false[10/19/19 13:47:50:011 EDT] 000036dd id= oli.am.fim.ws.oidc.tai.OIDCTrustAssociationInterceptorOnPrem > isTargetInterceptor(HttpServletRequest) ENTRY[10/19/19 13:47:50:011 EDT] 000036dd id= oli.am.fim.ws.oidc.tai.OIDCTrustAssociationInterceptorOnPrem 2 isTargetInterceptor(HttpServletRequest) Request URI: /TrustServerWS/SecurityTokenServiceWST13[10/19/19 13:47:50:011 EDT] 000036dd id= oli.am.fim.ws.oidc.tai.OIDCTrustAssociationInterceptorOnPrem < isTargetInterceptor(HttpServletRequest) RETURN false[10/19/19 13:48:12:359 EDT] 000036e8 id= com.tivoli.am.fim.om.ObjectManager$ObjectDestroyer > run() ENTRY[10/19/19 13:48:12:359 EDT] 000036e8 id= com.tivoli.am.fim.om.ObjectManager$ObjectDestroyer < run() RETURN[10/19/19 13:48:42:012 EDT] 000036de id= oli.am.fim.ws.oidc.tai.OIDCTrustAssociationInterceptorOnPrem > isTargetInterceptor(HttpServletRequest) ENTRY[10/19/19 13:48:42:012 EDT] 000036de id= oli.am.fim.ws.oidc.tai.OIDCTrustAssociationInterceptorOnPrem 2 isTargetInterceptor(HttpServletRequest) Request URI: /TrustServerWS/SecurityTokenServiceWST13[10/19/19 13:48:42:012 EDT] 000036de id= oli.am.fim.ws.oidc.tai.OIDCTrustAssociationInterceptorOnPrem < isTargetInterceptor(HttpServletRequest) RETURN false[10/19/19 13:48:43:008 EDT] 000036e1 id= oli.am.fim.ws.oidc.tai.OIDCTrustAssociationInterceptorOnPrem > isTargetInterceptor(HttpServletRequest) ENTRY[10/19/19 13:48:43:008 EDT] 000036e1 id= oli.am.fim.ws.oidc.tai.OIDCTrustAssociationInterceptorOnPrem 2 isTargetInterceptor(HttpServletRequest) Request URI: /rtss/authz/services/AuthzService[10/19/19 13:48:43:008 EDT] 000036e1 id= oli.am.fim.ws.oidc.tai.OIDCTrustAssociationInterceptorOnPrem < isTargetInterceptor(HttpServletRequest) RETURN false[10/19/19 13:48:50:009 EDT] 000036e1 id= oli.am.fim.ws.oidc.tai.OIDCTrustAssociationInterceptorOnPrem > isTargetInterceptor(HttpServletRequest) ENTRY[10/19/19 13:48:50:009 EDT] 000036e1 id= oli.am.fim.ws.oidc.tai.OIDCTrustAssociationInterceptorOnPrem 2 isTargetInterceptor(HttpServletRequest) Request URI: /rtss/authz/services/AuthzService[10/19/19 13:48:50:009 EDT] 000036e1 id= oli.am.fim.ws.oidc.tai.OIDCTrustAssociationInterceptorOnPrem < isTargetInterceptor(HttpServletRequest) RETURN false[10/19/19 13:48:50:011 EDT] 000036ee id= oli.am.fim.ws.oidc.tai.OIDCTrustAssociationInterceptorOnPrem > isTargetInterceptor(HttpServletRequest) ENTRY[10/19/19 13:48:50:012 EDT] 000036ee id= oli.am.fim.ws.oidc.tai.OIDCTrustAssociationInterceptorOnPrem 2 isTargetInterceptor(HttpServletRequest) Request URI: /TrustServerWS/SecurityTokenServiceWST13[10/19/19 13:48:50:012 EDT] 000036ee id= oli.am.fim.ws.oidc.tai.OIDCTrustAssociationInterceptorOnPrem <