SDWAN API Authentication using AAA user.

[Heri Diaz]

Hi community

Reading the documentation, I only see that SSO authentication is supported, but I'm wondering if AAA authentication is supported in vManage multitenant version 20.15.x.

Because sometimes works and other failed.

Response body can't parse JSON. Raw result: Access forbidden: role not allowed

Any advice would be greatly appreciated.

Thank you in advance.

Regards.
Heriberto Diaz

[bigevilbeard · Accepted solution]

@Heri Diaz if i read you thread correctly, your intermittent success and the "Access forbidden: role not allowed" error would IMO suggest an authorization (Role-Based Access Control) issue, not an authentication problem, thus your 403 error. I recall ages back that an unparseable JSON response was a known minor bug in some older vManage versions where the 403 response sometimes defaults to an HTML format instead of JSON, but the core issue is the permission denial.

I would raise this with TAC or the reach out the SD-WAN engineering team directly as you are internal to Cisco, they will help with debugging this issue.