Error: Principal does not possess one or more authenticators when using RSA SecurID Access Authenticate app tokencode with an Authentication Manager protected resource

3 years ago

Originally Published: 2019-04-25

Article Number

000046532

Applies To

RSA Product Set: SecurID Access
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.4

Issue

Attempting to authenticate with an RSA Authentication Agent using an Authenticate tokencode results in authentication failure and the following error in Authentication Manager logs:

Error: Principal does not possess one or more authenticators

Cause

This is due to an Authentication Manager software defect that can occur if the user previously had one or more tokens but now has no tokens assigned.

Resolution

This defect that will be fixed in a future Authentication Manager release.

Workaround

Either temporarily assign the user a fixed passcode or another SecurID token or use the command line utility described by Enable the RSA SecurID Authenticate App for Specific Users.

Note that a token temporarily assigned for this workaround can be unassigned once the Authenticate tokencode has successfully been used for authentication.

Notes

This authentication scenario where the user has no tokens does succeed if the user never previously had any assigned tokens.

Don't see what you're looking for?

Related Articles

Trending Articles