SA-39165

Summary

Developer has custom authentication set up where users are authenticated in site minder.

They have a auth service defined which gets invoked once the request reaches Pega.

Enabled external authentication in the operator record and tried to log into the application using external URL, user is getting the below error message.

Error Messages

"Error authenticating : This user must NOT use internal PegaRULES authentication"

Steps to Reproduce

1. Tick external authentication check box for a user in the operator record.
2. Log into the application using external URL.

Root Cause

A defect or configuration issue in users system. Source Of Operator credentials : Specifies whether only those users whose operator ID records have the External option selected are allowed access through this authentication service or whether only those users whose operator ID records do not have the External option selected are allowed access through this authentication service.

User was using external authentication option checked but source was "Use credentials stored in PegaRULES" which should not be used in this case.

Resolution

Change the value of Source of operator credentials as below to resolve the issue:

AuthenticationService >Custom tab >Other >Source of Operator credentials >Use externally stored credentials.