You are here: Administrator's Guide > Securing FME Server > Connecting to Active Directory > Troubleshooting Active Directory Configurations > Single Sign-On Authentication Failure (Service Account)

Single Sign-On Authentication Failure (Service Account)

Log file message:

(Single Sign-On) Failed authentication using pre-authenticated credentials (for a service account).

(Single Sign-On) Failed to create server credentials. Ensure that pre-authenticated credentials (for a service account) are correctly specified in single sign-on configuration.

Cause 1

The service account used by FME Server was not correctly specified. The account name or password may be incorrect, or both.

Resolution 1

Ensure that the service account details are correctly specified in the SECURITY_AD_PREAUTH_USERNAME and SECURITY_AD_PREAUTH_PASSWORD configuration parameters.

Cause 2

SASL authentication is not enabled, or the mechanism is not Kerberos V5.

Resolution 2

SASL authentication must be enabled and Kerberos V5 must be used as the authentication mechanism. For more information, see Updating the FME Server Configuration, SASL Authentication and SECURITY_AD_SASL_OPTION_MECHANISM.