[Access Control] Error Message Collection – HENNGE One Help Center

HENNGE Access Control
Error Message	Cause and Solution
403 You cannot access to this service, please ask your admin to update the SAML signing key.	If the SAML signing certificate is outdated, the following message may appear when accessing the connected service via SSO. Admins should refer to the following articles to update the SAML signing certificate for the relevant service. [Access Control] SAML Signing Certificate Update Procedure Frequently Asked Questions about SAML Signing Certificate Updates
403 Login denied by the policy. Access is not allowed.	You are not accessing under the conditions permitted by the organization. Please check if the source IP address or medium is allowed, and if unknown, contact your system admin. If the admin wants to allow user access, please change the assignment of the access policy group or modify the access policy conditions. [Access Control] Assigning Access Policy Groups to Users [Access Control] Creating / Editing Access Policy Groups If certificate-based login is required, please configure a login screen that supports certificates via [Domain Settings] — [Login] — [Authentication Method].
403 Forbidden	You are already logged in but attempting to log in to a different HENNGE One tenant. Please log out from "Logout to log in as a different user." or try logging in using incognito mode where authentication cache is not shared. Also, if you are accessing the administration, please do so with an account that has admin privileges. There may be authentication information from an account without admin privileges remaining, so please try in non-cache mode as well.
403 Login denied by the policy. OTP not configured, but OTP input is required. Access is not allowed.	This error is returned when OTP is not configured. If the user information in HENNGE Access Control matches the following conditions, the error message will be returned without transitioning to the OTP input screen during user login. ・No registered OTP emergency tokens ・OTP type is "Not configured" →You can check the OTP type configuration status in "Modern View". By configuring OTP or pre-setting an OTP emergency token, you can avoid the error and transition to the OTP input screen. OTP Issuance Method and Expiration Date
403 Login denied by the policy. No certificate selected.	This error is displayed in the following cases when logging in with a device certificate. No valid device certificate is installed on your device Your browser or app does not support authentication via digital certificates →Please check that you are using the supported OS and browser in the HENNGE Device Certificate (including import tool) section of the following article. HENNGE One Supported Environment An invalid screen transition occurred in the browser or app (e.g., "Cancel" was selected on the certificate selection screen) →Please restart the browser or app and try logging in again. Inconsistencies occurred due to browser cache →Please clear the browser cache and try logging in again. How to Clear Cache
403 Your account is locked. Please try logging in again after some time.	This error is displayed when login attempts have failed a certain number of times. Users should try logging in again after some time. If the admin wants to unlock immediately, please do so from the Administration. How to unlock
403 Login denied by the policy. Access is not allowed. Would you like to log in with a Device Certificate?	This error is displayed when login with a Device Certificate is required, but the [Log in with Certificate] button was not pressed and login was attempted with username and password. Please load the certificate from the [Log in with Certificate] button at the bottom of the screen.
404 Not found	Please confirm that you are accessing an accepted service provider. Also, please confirm that there are no errors in the URL you are accessing.
Invalid username or password.	・Please confirm that there are no mistakes in the value you are entering, as the username is case-sensitive. ・If the username entered on the login screen does not match the registered information, a "failed" history will not be recorded in the Access Logs.
The serial number XXXX of the certificate does not match any Tenant Certificate.	This error is displayed when the Tenant Certificate has expired or has been revoked. Please have the admin install the latest Tenant Certificate on the device.