[Access Control] Login Error Messages – HENNGE One Help Center

HENNGE Access Control
Error Message	Cause / Solution
403 Login was denied according to the access policy. No certificate has been selected.	This error is displayed when logging in with a device certificate in the following cases. A valid device certificate is not installed on the device being used The browser or app being used does not support authentication using digital certificates →In the HENNGE Device Certificate (including the import tool) section of the article below, please confirm that you are using a supported OS and browser. HENNGE One System Requirements ※On iPhone/iPad, certificates can only be used with Safari. [Device Certificate] Restrictions When Using Device Certificates on iOS / iPad OS An improper screen transition was made in the browser or app (for example, selecting "Cancel" on the certificate selection screen) →Restart the browser or app and try logging in again. An inconsistency or other issue has occurred in the browser cache →Clear the browser cache and try logging in again. How to clear the Cache in the Browser? Communication required to use HENNGE Access Control is blocked by a proxy, firewall, web filtering product, etc. →In the table under "Network" - "Service FQDN (URL)" in the article below, please confirm that the FQDN and ports used for "HENNGE Access Control" are allowed (or excluded). HENNGE One System Requirements The login password for a Windows PC was changed using a method that does not require entering the old password (such as a reset by an administrator) →Please check the causes and solutions described in the article below. [Device Certificate] Error "No certificate has been selected" displayed after changing the password on a Windows PC
403 Unable to access this service. The SAML signing certificate needs to be renewed. Please contact your administrator.	If the SAML signing certificate is outdated, the following message may be displayed when accessing the service provider via SSO. Administrators should renew the SAML signing certificate for the Target service by referring to the article below. SAML signing certificate renewal steps
403 Login was denied according to the access policy.	You are not accessing under conditions permitted by your organization. Check whether you meet the permitted conditions, such as the source IP address and device certificate installation status. If you are unsure, contact your system administrator. If administrators want to allow user access, change the access policy group assignment or modify the access policy conditions. [Access Control] Assigning Access Policy Groups to Users [Access Control] Creating/Editing Access Policy Groups ※If certificate login is required, configure a login screen where certificates can be used from ［Domain Settings］－［Login］－［Authentication Method］.
403 Forbidden	You are attempting to log in to a different HENNGE One tenant. Log out using "Log out and log in as another user." or try logging in using Incognito mode or another mode where authentication cache is not shared. Also, if you are accessing the administration console, use an account with administrator privileges. Authentication information for an account without administrator privileges may remain, so please also try logging in using Incognito mode or similar. If the issue is not resolved after taking the above measures, please contact HENNGE One Technical Support with the following information. •Screenshot of the error screen •Source IP address ※If unknown, the Access Control username •Approximate date and time of access
403 Login was denied according to the access policy. OTP (one-time password) has not been configured.	This error is returned when OTP has not been configured. When the HENNGE Access Control user information meets the following conditions, this error message is returned when the user logs in without transitioning to the OTP input screen. • No emergency OTP tokens are registered • OTP type is "Not configured" →You can check the OTP type configuration status in "Modern View." By configuring OTP or setting an emergency OTP token in advance, you can avoid the error and proceed to the OTP input screen. OTP Issuance Methods and Expiration Period
403 Your account is locked. Please try logging in again after a while.	This error is displayed when login fails a certain number of times. Users should wait a while and try logging in again. If administrators want to unlock the account immediately, unlock it from the administration console. [Access Control] How to Detect and Unlock a User When They Are Locked Out
403 Login was denied according to the access policy. Would you like to log in using a device certificate?	This error is displayed when you attempt to log in with a username and password without clicking the [Certificate Login] button when login using a device certificate is required. Load the certificate using the [Certificate Login] button at the bottom of the screen.
Login was denied Access to the service is not permitted. SP Issuer：XXX	Access to the service with the issuer XXX is not permitted. Please confirm that you are accessing a permitted service.
Login was denied. Service not found. SP Issuer：XXX	There is no service with the issuer XXX. Please confirm that the URL you are accessing is correct.
The username or password is incorrect.	There is an error in the entered information. •Usernames are case-sensitive, so please check that the entered value is correct. ※If the username entered on the login screen does not match the registered information, a "Failure" record will not be logged in the access log.
The certificate serial number XXXX does not match any tenant certificate.	This error is displayed when the tenant certificate has expired or has been revoked. Please have an administrator install the latest tenant certificate on the device.

Translation Disclaimer

This article has been automatically translated from the original Japanese version for your convenience.
While we strive to ensure accuracy, we cannot guarantee its reliability or completeness.

In the event of any discrepancies or questions regarding the content, the official Japanese version shall prevail.