Users show as disabled after enabling them from dashboard or by editing them in RSA Authentication Manager 8.x

[#1]

Article Number

000031420

Applies To

RSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.x

Issue

Users in a newly attached external identity source show as disabled, and administrators cannot manage or edit the users in RSA Authentication Manager.

Cause

This is a permissions issue for the LDAP service account used to manage the Active Directory on the RSA Authentication Manager from the Operations Console.

Resolution

1. From the external identity source (Active Directory in the example below), make sure that the group of users are being managed by the administrator (service account) who has full read permissions on the group:

Image description

Image description

2. Login to the primary Authentication Manager Operations Console and select Deployment Configuration > Identity Source > Manage Existing.  
3. Click the context arrow next to the identity source in question and click Edit.  
4. Click on the Map tab.
5. Scroll down to the section labeled Directory Settings.
6. Set the User Account Enabled State to Manage in Directory and Internal database.  This specifies where Authentication Manager looks for the enabled/disabled state of user accounts.
7. Click Save.
8. Select the Home tab on the Operations Console and click Flush Cache.
9. Choose to flush all cache objects and click Flush.
10. Wait for five minutes to ensure all cached objects have been cleared.
11. Go back to the Security Console and attempt to enable or manage a user.