Avaya is rebranding Avaya Experience Platform. Watch this space for more details. Log in to the site for better experience.

Click Here for details.

Avaya Workplace Client displays an authentication error

Add to My Topics

Watch

Download PDF

Feedback

Table of Content

Legal
Introduction
- Purpose
- Change history
Avaya Aura Device Services overview
- New in this release
- Solution topology
- Avaya Aura Device Services architecture topology
- Automatic configuration flow
- Components
- Data retention
- Data encryption
Management of Avaya Aura® Device Services with the web administration portal
- Logging in to the Avaya Aura Device Services web administration portal
  - Web administration portal roles
- Starting or stopping Avaya Aura Device Services
- Managing application sessions
  - Application Properties field descriptions
- Configuring enhanced search options
- Enabling an external load balancer
- Certificate management
- Client certificate policy administration
  - Configuring the client certificate policy using the Avaya Aura Device Services web administration portal
    - Client-Device Certificate Policy field descriptions
- Integration with Avaya Workspaces for Avaya Oceana
- Enabling Avaya Breeze platform authorization
- Dynamic Configuration service management
- Messaging server address discovery management
- LDAP server management
- Cross-origin resource sharing
  - Enabling Cross-origin resource sharing for the Service Interface
  - Enabling Cross-origin resource sharing for the Administrator Interface
- Web Deployment service management
Avaya Aura Device Services OAuth2 management
- OAuth2 on Avaya Aura Device Services overview
  - Components to support OAuth2
  - Authentication flows
  - Attribute mapping between Keycloak and a third-party identity provider
  - Token authentication realm
  - Access and refresh token expiry times
  - Prerequisites for OAuth2 configuration
- Checklist for OAuth2 authentication configuration
- Avaya Aura Device Services integration with Office 365 for OAuth2 authentication
  - Integration with Office 365 using SAML v2.0
  - Integration with Office 365 using OAuth2
- Avaya Aura Device Services integration with Microsoft Azure
  - Checklist for configuring Microsoft Azure integration using SAML v2.0
  - Creating a new application
  - Configuring user and administrator groups
  - Adding users to groups
  - Obtaining the group ID
  - Assigning users and groups to the SSO application on Microsoft Azure
  - Configuring a Microsoft Azure SAML v2.0 identity provider on Keycloak
- Avaya Aura Device Services integration with Ping Identity
  - Checklist for configuring Ping Identity integration using SAML v2.0
  - Creating a new SAML v2.0 application on Ping Identity
  - Obtaining the XML configuration file
  - Configuring user and administrator Population groups
  - Configuring attribute mapping on Ping Identity
  - Configuring a Ping Identity SAML v2.0 identity provider on Keycloak
  - Creating users on Ping Identity
- Avaya Aura Device Services integration with OKTA
  - Checklist for configuring OKTA integration using SAML v2.0
  - Creating a new SAML v2.0 application on OKTA
  - Obtaining the XML configuration file
  - Configuring an OKTA SAML v2.0 identity provider on Keycloak
  - Configuring user and administrator groups
  - Creating users on OKTA
  - Adding users to groups
  - Assigning a group to an OKTA SAML application
  - Configuring attribute mapping on OKTA
- Avaya Aura Device Services integration with Microsoft AD FS
  - Checklist for configuring AD FS integration using SAML v2.0
  - Configuring an AD FS SAML v2.0 identity provider on Keycloak
  - Configuring Keycloak as a relying party trust
  - Configuring the claim issuance policy
- Avaya Aura Device Services integration with One Login
  - Checklist for configuring OneLogin integration using SAML v2.0
  - Creating a new SAML v2.0 application on OneLogin
  - Configuring a OneLogin SAML v2.0 identity provider on Keycloak
  - Configuring attribute mapping on OneLogin
  - Creating users on OneLogin
- Avaya Aura Device Services integration with IBM SVA
  - Checklist for configuring IBM SVA integration using SAML v2.0
  - Creating a new SAML v2.0 application on IBM SVA
  - Configuring an IBM SVA SAML v2.0 identity provider on Keycloak
  - Configuring user and administrator groups
  - Assigning groups to your IBM SVA SAML application
  - Configuring attribute mapping on IBM SVA
  - Creating users on IBM SVA
  - Adding users to groups
- Avaya Aura Device Services integration with Google Duo
  - Checklist for configuring Google Duo integration using SAML v2.0
  - Creating a new SAML v2.0 application on Google Duo
  - Adding your SAML application to the Duo Access Gateway
  - Configuring a Google Duo SAML v2.0 identity provider on Keycloak
- Avaya Aura Device Services integration with Imprivata
  - Checklist for configuring Imprivata integration using SAML v2.0
  - Configuring LDAP settings
  - Enabling role fetching from LDAP
  - Configuring an Imprivata SAML v2.0 identity provider on Keycloak
  - Downloading the SPSSODescriptor file from Keycloak
- Avaya Aura Device Services integration with Auth0
  - Checklist for configuring Auth0 integration using SAML v2.0
  - Creating a new application
  - Configuring an Auth0 SAML v2.0 identity provider on Keycloak
  - Creating users on Auth0
  - Setting up last name and first name attributes in the user's profile
- Logging in to the Keycloak web administration portal
  - Changing your Keycloak password
- Authorization realm configuration on UC servers and Avaya Workplace Client
- Configuring Keycloak settings
- Starting and stopping the Keycloak service
- Obtaining the client secret
- Creating client mapping
  - Managing the existing client mapping
- Regenerating the Keycloak client secret
  - Updating the identity provider mapping
- Importing third-party identity provider private CA certificates
- Importing a third-party identity provider
- Selecting the default identity provider
- Modifying the attribute mapping between the third-party identity provider and Keycloak
  - Attribute mapping parameters for Microsoft Azure SAML v2.0 identity provider
  - Attribute mapping parameters for Ping Identity SAML v2.0 identity provider
  - Attribute mapping parameters for OKTA SAML v2.0 identity provider
  - Attribute mapping parameters for ADFS SAML v2.0 identity provider
  - Attribute mapping parameters for OneLogin SAML v2.0 identity provider
  - Attribute mapping parameters for the IBM SVA SAML v2.0 identity provider
  - Attribute mapping parameters for the Google Duo SAML v2.0 identity provider
  - Attribute mapping parameters for Imprivata SAML v2.0 identity provider
  - Attribute mapping parameters for Auth0 SAML v2.0 identity provider
- Configuring the LDAP UID mapping
- Testing the integration with an identity provider from the Google Chrome web browser
- Testing the integration with the identity provider from the web administration portal
  - OAuth2 testing status
- Configuring access and refresh token expiry times
- Blocking access to the Avaya Authorization service
- Enabling OAuth database replication in a cluster environment
- Keycloak log management
Avaya Spaces integration
- Checklist for configuring Avaya Spaces integration
- Avaya Spaces account configuration
- The use of Enterprise SSO for Avaya Spaces integration
- Obtaining an API key and API key secret
- Setting up Avaya Spaces integration
- Configuring data synchronization between Avaya Aura Device Services and Avaya Spaces
- Phone number synchronization
  - Configuring phone number synchronization
- Uploading Avaya Spaces language and time zone settings to Avaya Aura Device Services
  - Language file format
  - Time zone file format
- User and license management overview
- Updating Avaya Spaces integration parameters
  - Avaya Spaces integration settings
- Disabling Avaya Spaces integration
- Deleting the Avaya Spaces configuration
- Viewing the Avaya Spaces connection status
LDAP server management
- Configuring the UID mapping attributes when using multiple authentication domains
- Adding a new enterprise LDAP server
  - Enterprise LDAP Server Configuration field descriptions
  - Configuring additional base context DNs
- LDAP server discovery using DNS SRV records
  - Checklist for configuring LDAP discovery using DNS SRV records
  - Configuring LDAP server discovery using DNS SRV records
- Testing connection to an LDAP server
- Modifying the provenance priority
- Administering the LDAP server configuration
- Enabling LDAP authentication for OAuth
- Modifying enterprise directory attribute mappings
- Configuring Windows Authentication for Active Directory
- Selecting an authentication domain
- Setting up user synchronization with the LDAP server
- Configuring the internationalization parameters
- Adding a trusted host
- Supported characters for LDAP attributes
- Updating user attributes in LDAP
- Open LDAP user data imports
- Configuration of LDAP contact search
Avaya Aura Device Services network settings configuration
- Avaya Aura Device Services network configuration checklist
- Prerequisites for configuring Avaya Aura Device Services network settings
- Configuring network settings using the cliChangeNet.sh script
- Configuring network settings using the Avaya Aura Device Services configuration utility
Certificate management
- Managing certificates in the Avaya Aura Device Services web administration portal
- Generating System Manager identity certificates
- Managing identity certificates
- Managing server interface certificates
  - Certificate assignment descriptions
- Managing truststore certificates
- Certificate revocation management
  - Configuring the revocation check policy
- Importing the secure LDAP certificate using the web administration portal
- Importing third party CA signed certificates
Web Deployment service management
- Web Deployment port configuration
- Uploading the client installer
  - Appcast items field descriptions
- Editing an appcast item
- Selecting interactive or non-interactive upgrade mode for Avaya Workplace Client for Windows
- Deleting an appcast item
- Reviewing download statistics
  - Download statistics field descriptions
Utility Server administration
- Utility Server capacity limits
- Supported and unsupported phone models
- Setting up a DHCP server
- Starting and stopping the Utility Server
- Enabling access to the Utility Server using an HTTP connection
- Logging in to the Utility Server
- Reviewing the disk space occupied by firmware package files
- Uploading files on the Utility Server
- Uploading settings files to the Utility Server
- Uploading an IP phone custom file
  - Viewing custom files uploaded on the Utility Server
  - Accessing IP phone custom files
- Backing up H.323 phone settings on the Utility Server
- Utility Server backup and restore
- Firmware management
Administration of the Dynamic Configuration service
- Viewing the Home location in System Manager
- Dynamic configuration setting priorities
- Assigning a group identifier to a phone model
- Adding a new platform
  - Deleting a platform
- Creating a new configuration
- Overwriting an existing configuration
- Testing configuration settings
- Publishing the configuration settings
- Viewing published settings
- Retrieving configuration settings for a user
- Import of dynamic configuration settings
- Managing automatic logging in to Avaya clients
- Administering the default configuration
  - Defaults field descriptions
- Split Horizon DNS mapping
Integrated Windows Authentication administration and management
- Authentication prerequisites
- Setting up the Windows Domain Controller
  - Windows Domain Controller command descriptions
- Enabling encryption for the domain user
- Setting up IWA on the Avaya Aura Device Services administration portal
AWS-specific management options
- Updating an existing stack with a new CloudFormation template
Security options
- Configuring the data retention period
- Data encryption management
- Advanced Intrusion Detection Environment tool management
- ClamAV antivirus software management
- CylancePROTECT antivirus software overview
- Enabling additional STIG hardening
  - Disabling additional STIG hardening
- Configuring the SameSite cookie attribute
  - Configuring the SameSite attribute for web-based clients
- Characters supported for Avaya Aura Device Services passwords
- Password policy for human-user accounts
  - Configuring password rules
- Avaya Aura Device Services entry points
Monitoring options
- Monitoring cluster nodes
  - Cluster Nodes field descriptions
- Checking the Avaya Aura Device Services status from the CLI
- Checking the status of a remote Avaya Aura Device Services node from the CLI
- Viewing performance statistics
  - Performance charts
- Logs and alarms
- Enhanced Access Security Gateway for real time support
  - Enabling the Enhanced Access Security Gateway after Avaya-provided OVA deployment
  - Removing EASG
Backup and restore
- Backing up Avaya Aura Device Services
- Automatic backups
  - Configuring automatic backups
  - Changing the location of automatic backups
- Avaya Aura Device Services configuration portability
- Restoring options for standalone and cluster environments
  - Restoring Avaya Aura Device Services in a standalone environment
  - Restoring an Avaya Aura Device Services cluster
Avaya Aura Device Services upgrade and migration operations
- Avaya Aura Device Services upgrade checklist
- Disk encryption
- System layer (operating system) updates for virtual machines deployed using Avaya-provided OVAs
- Updating the system layer for software-only deployments
- Upgrading Avaya Aura Device Services on AVP
- Upgrading Avaya Solutions Platform from Release 4.0 to 5.0
- Upgrading Avaya Aura Device Services on ESXi or AWS
- Migrating Avaya Aura Device Services on ESXi
- Configuring RSA public and private keys for SSH connections in a cluster
- Migrating Utility Server data
- Upgrading existing test configurations
- Running a patch to allow Avaya Workplace Client for Windows to connect to the Web Deployment service
- Running a patch to allow the Avaya Aura Web Gateway to connect to the Avaya Aura Device Services automatic configuration service
- Enabling Open LDAP replication
  - Re-enabling Open LDAP replication after removing a node from a cluster
- Checking for DRS synchronization
Migrating Avaya Aura® Device Services from VMware to ASP R6.0.x (KVM on RHEL 8.10)
- Migrating Avaya Aura Device Services from VMware to ASP R6.0.x (KVM on RHEL 8.10)
- Obtaining existing VMware details
- Checklist of prerequisite tasks to migrate Avaya Aura Device Services from VMware to ASP R6.0.x (KVM on RHEL 8.10)
- Obtaining Avaya Aura Device Services network configuration details
Troubleshooting
- DRS remains in Ready to Repair state
- DRS remains in repairing state for a long time
- DRS remains in not polling state
- DRS fails with constraint error
- Avaya Aura Device Services installation or upgrade fails due to invalid System Manager certificates
- Services are not working properly after an installation or upgrade
- EASG login using craft username results in an Access Denied error
- ESG cannot connect to Avaya Aura Device Services
- A new private key failed to generate
- DNS entries disappear from the /etc/resolv.conf file after restarting Avaya Aura Device Services
- Check for Updates feature is not working
- Slow Avaya Aura Device Services performance
- Primary System Manager fails
- Cannot connect to System Manager after replacing a revoked System Manager certificate with a valid certificate
- Unable to access the web administration portal when the primary node Session Manager is non-operational
- PPM certificate error
- Repairing faulty users
- Exception in the AADS.log file
- The AADS.log file contains contact integrity data
- System Manager does not show Avaya Aura Device Services alarms
- Firmware upgrade fails for certain endpoints
- Cannot upload large files to the Utility Server
- Synchronization with the LDAP server fails
- Open LDAP replication fails
- Open LDAP replication fails if Avaya Aura Device Services uses a custom identity certificate for server interfaces
- Allocating unused disk space to logical volumes
  - ESXi virtual hardware adjustments
    - Increasing the virtual disk size of ESXi virtual machines
    - Adjusting the CPU and memory resources of the Avaya Aura Device Services virtual machine
  - Increasing the virtual disk size of AWS virtual machines
- Cannot reinstall a non-seed node due to Cassandra startup error
- Troubleshooting for OAuth2 authorization
  - OAuth2 authentication does not work as expected
  - Login page for the third-party identity provider is not displayed
  - An error page is displayed instead of the Login page
  - Login credentials do not work
  - Avaya Workplace Client displays an authentication error
    - Verifying the attributes imported for a user
    - Verifying the mapping of the identity provider’s attributes
  - A test user cannot log in to the identity provider
  - Interoperability issues between Avaya Aura Device Services and the third-party identity provider
- Avaya Spaces integration
  - Avaya Spaces connectivity errors
  - Avaya Aura Device Services does not contain the latest Avaya Spaces CA certificate
  - Cannot register an enterprise user on Avaya Spaces
  - Avaya Spaces user management operation fails
- Logs collected using the collectlogs command are encrypted
- Avaya Workplace Client cannot connect to Avaya Aura Device Services
- Avaya Workplace Client cannot connect to Avaya Aura Device Services when the secure connection is enabled
- The location of automatic backups has changed after the upgrade
- RHEL single-user mode
  - Booting the RHEL into single-user mode
  - Changing the password for single-user mode
  - Exiting the single-user mode
Resources
- Documentation
  - Finding documents on the Avaya Support website
  - Avaya Documentation Center navigation
- Viewing Avaya Mentor videos
- Support
  - Using the Avaya InSite Knowledge Base
Additional administration tools
- collectlogs
- clitool-acs
- statusAADS utility
- Checking the Avaya Aura Device Services status from the CLI
- Shutting down Avaya Aura Device Services gracefully
- System layer commands
- runUserDiagnostics tool
- Aliases
  - app commands
  - cdto commands
Managing DNS and NTP addresses
- Updating DNS addresses and search domains
- Updating NTP addresses
Glossary
- Cassandra
- Domain Name System (DNS)
- Endpoints
- Fully Qualified Domain Name (FQDN)
- Network Time Protocol (NTP)
- Secure Shell (SSH)
- Simple Network Management Protocol (SNMP)
- SSL (Secure Sockets Layer) Protocol
- TCP
- TLS
- UDP

HomeAdministering Avaya Aura® Device ServicesAvaya Workplace Client displays an authentication error

Table of Content

Avaya Workplace Client displays an authentication error

Add to My Topics

Watch

Download PDF

Feedback

Last UpdatedDec 11, 2020
1 minute read

Condition

The user can log in on the identity provider’s Login page, but Avaya Workplace Client displays an authentication error.

Solution

Procedure

Verify that the mapping of the identity provider attributes are correct.
Verify that the user record created on Keycloak contains the correct attribute values.

Log in to get a better experience

Feedback Feedback

Administering Avaya Aura® Device Services

Filters

Solutions

Products

User Role

Audience

Document type

Avaya Workplace Client displays an authentication error

Table of Content

Avaya Workplace Client displays an authentication error

Condition

Solution

Procedure

RELATED LINKS

Log in to get a better experience

Feedback

Download PDF

Provide feedback for this topic

Download PDF

Provide feedback for this topic