"Your credentials aren't allowed" issue with Azure AD authentication

858 views
Skip to first unread message

Alex Pilon

unread,
Apr 5, 2018, 1:04:15 PM4/5/18
to AWX Project
Hello,

I'm having issues with the Azure AD authentication / usage in AWX.

Just installed and configured AWX, I can login fine with the built-in admin account.

I went into Azure AD, created my App Registration, gave the proper permissions ("Read directory data" in both Application and Delegated permissions, "Access the directory as the signed-in user" and "Sign in and read user profile" in Delegated permissions), granted permissions in AAD, copied the Application ID in "Azure AD Oauth2 Key", and the Object ID in "Azure AD Oauth2 Secret".
I then configured the Organization Map as follows: 
{
 
"Default": {
 
"users": true
 
}
}

Saved, logged out, tried to connect: "Your credentials aren't allowed".

I can't figure out why this is happening. Does anyone have any clue ? 

Thanks in advance!
Message has been deleted
Message has been deleted

Alex Pilon

unread,
Apr 23, 2018, 11:37:38 AM4/23/18
to AWX Project
Bump! Still need help with this, haven't been able to figure it out just yet! :(
Any help would be greatly appreciated.
Thanks!

Christian Adams

unread,
Apr 23, 2018, 11:54:04 AM4/23/18
to Alex Pilon, AWX Project
Hi Alex,

I wonder if this might be related to this issue with multiples so backends: (https://github.com/ansible/awx/issues/1418).  The time line matches.  Are you seeing any “multiple authentication backend” errors in your logs?

Thanks,
Christian

__________________________________________________
Christian M. Adams
Associate Software Engineer at Ansible - Red Hat
University of North Carolina at Chapel Hill, Class of 2014
cha...@redhat.com  |  (919) 218-5080  |  GitHub: rooftopcellist
--
You received this message because you are subscribed to the Google Groups "AWX Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email to awx-project...@googlegroups.com.
To post to this group, send email to awx-p...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/awx-project/a4785deb-0dd5-4c0b-b9b3-073bb74d38b2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Krishna Chaitanya Cherukuri

unread,
Nov 8, 2018, 7:11:43 AM11/8/18
to AWX Project
I too am stuck with this. did you had any luck resolving this.
Reply all
Reply to author
Forward
0 new messages