11.4 User Provisioning Error Messages

The following error messages are displayed for the end user if there are problems during provisioning.

Table 11-1 Provisioning Error Messages

Error Message

Cause

Username length cannot exceed (?) characters.

The user entered more characters for a user name than is allowed, as specified by the administrator.

Username is not available.

The user entered a name that already exists in the directory.

Passwords don’t match.

The user provided two password values that do not match.

Passwords must be between (x) and (y) characters in length.

The user provided password values that are either too short or too long.

Username unavailable.

The provisioned user account was deleted without first defederating the user. Remove orphaned identity objects from the configuration datastore.

IMPORTANT:Only experienced LDAP users should remove orphaned identity objects from the configuration datastore. You must ensure that the objects you are removing are orphaned. Otherwise, you create orphaned objects by mistake.

Unable to complete authentication request.

Can occur when users are allowed to create accounts from a service provider’s login page, when the service provider uses Active Directory for the user store.

The password provided does not conform to the Windows password complexity policy in Active Directory. Ensure that Active Directory is configured to use a secure port, such as 636, and that the user’s password conforms to the complexity policy. If you encounter this error, you must reset the password on the Windows machine.