Finesse authentication against awdb

[Rima]

Hello Team,

Last week we have faced an issue. After performing an initialize local database , agents were unable to authenticate to finesse.

We disabled the NTLMv2 on the AWDB but the issue persists. the AD team activated  NTL on the active directory and the issue resolved. The AD Team has disabled NTLM on Active directory 7 days before the happening of the issue.

We would like to figure out the root cause ?

IS the initialize local database is the  action that has  triggered this issue asthe issue has happened 7 days after performing the disablement of NTLM on AD?

what type of data are copied by the initialize local database that are related t the AD and type of authentication?

I would be grateful if anyone could explain the process of finesse authentication against AWDB using a domain user  ?

PS: UCCE v 10.5

Thank you for your help and support

[Jonathan Schulenberg]

Finesse doesn’t touch NTLM directly. It’s either expecting a user to provide credentials directly on the login page or using SAML SSO. Whatever happens between the browser and the IdP (creds, Kerberos, NTLM, X.509 cert, MFA, etc) is completely independent of Finesse; all it wants is the SAML response from the user’s browser when it’s finished. (The IdP and Finesse never communicate directly. The browser is redirected back and forth between them). Your IAM folks need to help troubleshoot this.