Authentication test login fails with "ERROR: Authentication Module: XXXXXX not found in configuration" in RSA Identity Governance & Lifecycle

[#1]

Article Number

000027891

Applies To

RSA Product Set: Identity Governance & Lifecycle 
RSA Product/Service Type: IBM WebSphere
RSA Version/Condition: 7.x

Issue

A test of an authentication source defined in RSA Identity Governance & Lifecycle on IBM WebSphere (Admin > System > Authentication tab > LDAPLogin (name of authentication source) > Test) fails with the following error:

ERROR: Authentication Module:LDAPLLogin not found in configuration

Image description

 

The Authentication Source Test button is used to check the authentication configuration and sample user login.

Cause

This error occurs when the name of the Authentication Source defined in RSA Identity Governance & Lifecycle does not match the name of the Java Authentication and Authorization Service (JAAS) - Application Login alias defined in IBM WebSphere.

RSA Identity Governance & Lifecycle
 

Image description

IBM WebSphere
 

Image description

Resolution

Ensure that the RSA Identity Governance & Lifecycle Authentication Source Name is the same as the IBM WebSphere JAAS Application Login alias name. This can be done in one of two ways:

1. Add an Authentication Source name in RSA Identity Governance & Lifecycle that matches the JAAS Application Login alias in IBM WebSphere. In the RSA Identity Governance & Lifecycle User Interface, go to Admin > System > Authentication > Create Authentication Source to create a new authentication source.

or

2. Add a JAAS Application Login alias in IBM WebSphere that matches the one in RSA Identity Governance & Lifecycle. In the IBM WebSphere User Interface, go to Security > Global Security > Java Authentication and Authorization Service > Application Logins > New. The Module class name should be defined as com.aveksa.server.authentication.TestLoginModule.