# Ignition v7.9.12 - SSO - Error attempting client login

**URL:** <https://forum.inductiveautomation.com/t/ignition-v7-9-12-sso-error-attempting-client-login/40263>\
**Category:** Ignition\
**Tags:** ignition79\
**Created:** [November 3, 2020, 9:36pm UTC](https://forum.inductiveautomation.com/t/ignition-v7-9-12-sso-error-attempting-client-login/40263 "2020-11-03T21:36:19Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![lshirley](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/lshirley/32/6627_2.png) [@lshirley](https://forum.inductiveautomation.com/u/lshirley)\
**Post date:** [November 3, 2020, 9:36pm UTC](https://forum.inductiveautomation.com/t/ignition-v7-9-12-sso-error-attempting-client-login/40263/1 "2020-11-03T21:36:20Z")

</div>

Hello,

For some weird reason (zero config changes), SSO decided to stop working this week. Starting getting calls literally on Monday of this week. We’ve been using it since day one near about with 0 issues.

We’re only having issues with SSO. Since it’s failing, it’s prompting us for our username and password. Our Active Directory credentials still work, so I know our AD User Profile is working fine.

I set the SSOHelper Logger to TRACE, and this is what I’m seeing in the logs:

```auto
javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C09042A, comment: AcceptSecurityContext error, data 52e, v3839]
at com.sun.jndi.ldap.LdapCtx.mapErrorCode(Unknown Source)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(Unknown Source)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(Unknown Source)
at com.sun.jndi.ldap.LdapCtx.connect(Unknown Source)
at com.sun.jndi.ldap.LdapCtx.(Unknown Source)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(Unknown Source)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(Unknown Source)
at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(Unknown Source)
at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(Unknown Source)
at javax.naming.spi.NamingManager.getInitialContext(Unknown Source)
at javax.naming.InitialContext.getDefaultInitCtx(Unknown Source)
at javax.naming.InitialContext.init(Unknown Source)
at javax.naming.ldap.InitialLdapContext.(Unknown Source)
at com.inductiveautomation.ignition.gateway.authentication.impl.LDAPHelper.openContext(LDAPHelper.java:207)
at com.inductiveautomation.ignition.gateway.authentication.impl.LDAPHelper.search(LDAPHelper.java:270)
at com.inductiveautomation.ignition.gateway.authentication.impl.ADInternalHybridUserSource.findSSOUser(ADInternalHybridUserSource.java:251)
at com.inductiveautomation.ignition.gateway.authentication.impl.SsoHelper.authenticateAdSso(SsoHelper.java:66)
at com.inductiveautomation.ignition.gateway.authentication.impl.SsoHelper.authenticate(SsoHelper.java:37)
at com.inductiveautomation.ignition.gateway.authentication.impl.ADInternalHybridUserSource.authenticate(ADInternalHybridUserSource.java:147)
at com.inductiveautomation.ignition.gateway.authentication.UserSourceWrapper.authenticate(UserSourceWrapper.java:200)
at com.inductiveautomation.ignition.gateway.servlets.gateway.functions.Login.client(Login.java:120)
at sun.reflect.GeneratedMethodAccessor118.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at com.inductiveautomation.ignition.gateway.servlets.gateway.AbstractGatewayFunction.invoke(AbstractGatewayFunction.java:208)
at com.inductiveautomation.ignition.gateway.servlets.Gateway.doPost(Gateway.java:405)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:707)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)
at com.inductiveautomation.ignition.gateway.bootstrap.MapServlet.service(MapServlet.java:85)
at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:837)
at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:583)
at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143)
at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:548)
at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:226)
at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1160)
at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:511)
at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:185)
at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1092)
at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141)
at org.eclipse.jetty.server.handler.HandlerList.handle(HandlerList.java:52)
at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:134)
at org.eclipse.jetty.server.Server.handle(Server.java:518)
at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:308)
at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:244)
at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:273)
at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:95)
at org.eclipse.jetty.io.SelectChannelEndPoint$2.run(SelectChannelEndPoint.java:93)
at org.eclipse.jetty.util.thread.strategy.ExecuteProduceConsume.produceAndRun(ExecuteProduceConsume.java:246)
at org.eclipse.jetty.util.thread.strategy.ExecuteProduceConsume.run(ExecuteProduceConsume.java:156)
at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:654)
at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:572)
at java.lang.Thread.run(Unknown Source)

```

Anybody have any thoughts?

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [November 3, 2020, 10:00pm UTC](https://forum.inductiveautomation.com/t/ignition-v7-9-12-sso-error-attempting-client-login/40263/2 "2020-11-03T22:00:32Z")

</div>

This suggest your password is invalid: [https://ldapwiki.com/wiki/Common%20Active%20Directory%20Bind%20Errors](https://ldapwiki.com/wiki/Common%20Active%20Directory%20Bind%20Errors)

> Returns when [username](https://ldapwiki.com/wiki/Username) is valid but [password](https://ldapwiki.com/wiki/Password)/[credential](https://ldapwiki.com/wiki/Credential) is invalid.

It might be the connection username/password you have configured the auth profile to use, not the one you are trying to log in with.

---

<div class="post-metadata">

**Author:** ![lshirley](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/lshirley/32/6627_2.png) [@lshirley](https://forum.inductiveautomation.com/u/lshirley)\
**Post date:** [November 4, 2020, 1:54pm UTC](https://forum.inductiveautomation.com/t/ignition-v7-9-12-sso-error-attempting-client-login/40263/3 "2020-11-04T13:54:32Z")

</div>

Thanks! It does appear our “Server Team” had changed the password belonging to the account we were using for lookups (though they did so without warning).

This issue has been resolved!

Thanks again!
