I saw your message in my inbox saying that logging in to the IdP namespace then the AD namespace worked - thanks for the update. Bizarrely, it won't allow me to reply to your message.
I'm guessing you'll want to close off this thread now?
Cheers!
MF.
------------------------------
Mark Fry
Technical Consultant
------------------------------
Original Message:
Sent: Wed July 03, 2024 11:01 AM
From: Mark Fry
Subject: Navigating Multi-Factor Authentication (IdP) namespace
Interesting! What happens if you log in first to the IdP namespace, then try to log in afterwards to the Active Directory namespace? Do you see the same issue?
MF.
------------------------------
Mark Fry
Technical Consultant
------------------------------
Original Message:
Sent: Wed July 03, 2024 10:55 AM
From: Elizabeth Johnson
Subject: Navigating Multi-Factor Authentication (IdP) namespace
I received the same error message after clearing the cache. The original name space was 'Active Directory' and the new one is 'IdP'.

------------------------------
Elizabeth Johnson
Original Message:
Sent: Wed July 03, 2024 10:02 AM
From: Mark Fry
Subject: Navigating Multi-Factor Authentication (IdP) namespace
Can you confirm that you do have two separate namespaces (not just one)? If you do, I would try logging out, close your browser, clear the cache, then try logging in again to both namespaces.
Cheers!
MF.
------------------------------
Mark Fry
Technical Consultant
Original Message:
Sent: Wed July 03, 2024 09:57 AM
From: Elizabeth Johnson
Subject: Navigating Multi-Factor Authentication (IdP) namespace
When I tried to sign in I get the following error: AAA-AUT-0013 The user is already authenticated in all available namespaces.
Is there any way to get around this?

Thanks,
------------------------------
Elizabeth Johnson
Original Message:
Sent: Wed July 03, 2024 09:38 AM
From: Mark Fry
Subject: Navigating Multi-Factor Authentication (IdP) namespace
Is your user signed in to the provider used for the MFA users? If it's a different namespace, you will need to sign in twice - once to the "normal" authentication provider (which I'm assuming gives you your System Admin privileges), then without signing out, sign in a second time to the new MFA provider. You should then be able to navigate into the MFA namespace to allocate the users/groups to the Cognos roles.
Cheers!
MF.
------------------------------
Mark Fry
Technical Consultant