|Applies To||RSA ACE/Agent 5.x for Web|
Microsoft Windows Server 2003 SP1
Microsoft Outlook Web Access (OWA) using Single Sign-On (SSO)
|Issue||Error: "500 internal server error" in web browser when accessing Microsoft Outlook Web Access (OWA) mailbox while using RSA ACE/Agent 5.x for Web|
Works for most users, but specific users fail with "500 internal server error"
Trace shows error "Global Catalog search failed != GC_UNIQUE_UPN"
|Cause||The user exists in the Global Catalog for more than one domain. RSA Security's SSO logic doesn't know which user to map to a mailbox.|
|Resolution||One requirement of RSA Security's Outlook Web Access (OWA) with Single Sign-On (SSO) configuration is that the user names (UPN) be unique. As a workaround, remove any duplicates and it should work fine.|
If you are unable to find any duplicates, contact RSA Security Customer Support and request build 322 and higher of RSA ACE/Agent 5.x for Web. The trace will now show the names or each UPN found.
|Legacy Article ID||a27997|