Cause

The Access Point Profiles on the EAM Controller are configured to use inclusion groups and the account is not a member of the associated Active Directory group.

Resolution

Add the user account to the appropriate Active Directory group.

To determine the name of the inclusions group, log into the EAM Console with an EAM administrator account and perform the following steps.

1. From the EAM Console, expand EAM > Evidian Enterprise Access Management > User Access > AccessPoint Profiles > Default Access Point Profile.
2. On the Configuration tab, select the Authentication Manager tab, and then click Manage Accounts.
   Figure 1. Manage Accounts

The Manage Accounts window displays the inclusion groups.

Figure 2. Inclusion Group table