Not in list of allowed users

[defendable-binnver]

Hello!
We're having trouble making authd work with our entra-id application.

We, the admins setting it up have no problem logging in and using it as intended. However, other groups whom the functionality is actually intended to work for, get a "Permission denied" error.

A closer look at the logs reveal these two errors:
from journalctl -u authd.service:
can't check authentication: invalid access authentication key:

And from journalctl -u snap.authd-msentraid.authd-msentraid.service:
User "<user@email>" is not in the list of allowed users

We have not done anything spesific to the entraid app outside what is described in
https://documentation.ubuntu.com/authd/en/latest/howto/configure-authd/

How would we solve this issue?

PS: Due to errors listed in #858 we are using the edge channel for the snap msentraid service.

[adombeck]

Hi!

We, the admins setting it up have no problem logging in and using it as intended. However, other groups whom the functionality is actually intended to work for, get a "Permission denied" error.

By default, the first user to log in is registered as the owner. What's happening is probably that the admin who tries to log in is registered as the owner, so the next user who tries to log in gets a permission denied error. The documentation explains how you can configure authd to allow multiple users.

[defendable-binnver]

Thank you, this was indeed the issue! Once again a reminder to read the documentation thoroughly.