Cannot authenticate Usernames mit German characters like üö

[HelmutLuckas2]

Hello Support,

AM 8.4 P9

i cannot authenticate Usernames mit German characters like üö.

Security Console Monitor : Unable to rsolve user by login ID and/or alias, or authenticator not assigned to user.

KrügerMa -> KruegerMa

If i remove this charakters from the user login name authentication succeeds.

We need this feature for our customers in germany, which uses german charakters in login names.

Thank you

[_EricaChalfin]

Helmut Luckas‌,

I've moved your question to the RSA SecurID Access" data-type="space space where it will be seen by the product's support engineers, other customers and partners.  Please bookmark this page and use it when you have product-specific questions.

Alternatively, from the RSA Customer Support page, click on Ask A Question on the blue navigation bar and choose Ask A Product Related Question.  From there, scroll to RSA SecurID Access" data-type="space‌‌ and click Ask A Question.  That way your question will appear in the correct space.

Additionally, I removed the screen shot you attached because it contained personally identifying information (PII), such as user names, IP addresses, etc.  Please see https://community.rsa.com/community/products/securid/blog/2018/11/27/tips-for-posting-questions-to-the-rsa-securid-access-community for more information.

A cleaned up version of the screen shot without the PII is below:

Activity key:  Resolve principal by user ID or alias

Description:  Attempting to resolve user by userid or alias "<user_ID that has the characters üö"> Request originated from agent "<agent name>" with IP address "<IP address>" in security domain <"SystemDomain">  

Reason:  Unable to resolve user by login ID and/or alias, or authenticator not assigned.

Regards,

Erica

[RandyBelbin · Accepted solution]

Hello Helmut,

There are a few different things that might cause this including the way the agent is handling these characters before they are ever sent to Authentication Manager. I recommend opening up a support case so our team can troubleshoot with you.

https://community.rsa.com/docs/DOC-86717 

Best,

Randy

[JayGuillette]

Randy's correct, you should open a support case so we can get Engineering involved.  A question they will ask is, is the user in the Internal RSA Authentication Manager database or in an LDAP external Identity Source like Active Directory?

[HelmutLuckas2]

hi,

thanks for your support.

user is connected via Microsoft AD / LDAP Database.

i try to authenticate via windows 2012 server via Auth., Agent.

It works only fine if i rename the user name with no special characters.

[EdwardDavis]

You are right.

I made a user named   like_üö

This user can authenticate to Self Service console or WebTier fine,

but at an agent (I tested ntradping radius client) the username is mangled:

I see you have a support case assigned to an engineer, I jumped in and created a defect for engineering number AM-36777.