In a multi-tenant environment in SAS^® Viya^®, when you log on to a tenant using LDAP credentials, you might encounter the following error:

However, it is possible to log on using the tenant administrator sasprovider account or other authentication providers like OIDC and SAML, and the users and groups populate correctly in SAS^® Environment Manager for the tenant. 

The typical reasons for this behavior include the following:

• The supplied credentials are incorrect.
• The sas.identities.provider.ldap.users/searchFilter configuration is incorrect
• The Tenant Access Policy is set to Limited. (Note that the policy might appear to be open.)

To ensure that the issue is not with your tenant access policy, complete the following steps:

1. Access SAS Environment Manager on the provider tenant and assume administrative privileges.
2. On the Tenants pane, set the Access Policy to Limited for the tenant if it is not set already.
3. On the Tenants pane, set the Access Policy to Open for the tenant.

Toggling the Tenant Access Policy from Open to Limited and back again ensures that SAS^® Logon Manager attempts to use your LDAP configuration to authenticate.