|Applies To||RSA Product Set: SecurID Access|
|Issue||Automatic IWA has been configured per Enable Automatic Integrated Windows Authentication but users are still presented with the portal login page where they need to either enter their credentials or click on the IWA icon.|
The /var/log/symplified/symplified.log contains messages like:
2016-11-14/16:22:29.839/UTC [ajp-apr-8009-exec-4] ERROR com.symplified.service.appliance.sp.SPService - IP restrictions likely misconfigured for idp RSA SecurID Access IWA Connector
|Cause||Configuring the IWA Identity Provider with Authentication Source Rules/IP Range using Classless Inter-Domain Routing (CIDR) notation, as below, will cause this issue.|
|Resolution||Use IP:NETMASK rather than CIDR notation to define the IP address range value. For example, rather than 192.168.20.0/24, use 192.168.20.0:255.255.255.0.|
As always, be sure to re-publish after making this change.