Error: Unable to login. Multiple user accounts are mapped for the same login attribute. Please contact your administrator
Issue description
Users encounter the error message "Unable to login. Multiple user accounts are mapped for the same login attribute. Please contact your administrator" during ADSelfService Plus login.
Possible causes
- Duplicate email addresses: Two or more user objects in AD have the same email address.
- Multiple domains configured: ADSelfService Plus is configured with multiple domains, and users are attempting to log in using just the sAMAccountName without specifying the domain or the domain drop-down is hidden.
Prerequisite
- Administrative access to AD.
Resolution
The AD administrator should follow these steps to resolve the issue.
Step 1: Remove duplicate email addresses
- Open Active Directory Users and Computers (ADUC) (dsa.msc).
- Search for the email address that appears to be duplicated.
- Identify all the user accounts associated with that email address.
- Modify or remove the email address from any duplicate accounts to ensure uniqueness.
- Click Apply and OK to save changes.
Step 2: Enforce domain-specific usernames (If multiple domains exist)
- If the domain drop-down list is hidden in ADSelfService Plus, instruct the user to log in using the domain-qualified username format.
domainname\username This eliminates ambiguity by explicitly specifying the domain.
Step 3: Select domain from drop-down (If available)
- If the domain drop-down list is visible:
- Instruct the user to enter the sAMAccountName (username) in the login field.
- Select the correct domain from the drop-down list.
- Click Login.
Tips
- Always ensure that email addresses are unique within your AD environment.
- Educate users on the correct login format when multiple domains are configured.
- Configure ADSelfService Plus to display the domain drop-down list if multiple domains are in use.
How to reach support
New to ADSelfService Plus?
Related Articles
Troubleshooting Guide for Common Errors in ADSelfService Plus End User Portal
Permission denied. Please contact your administrator. Cause: There are two reasons why this error could occur: End users trying to access any of the self-service features in ADSelfService Plus such as password reset or directory self-update need to ...Error: Unable to log you in because your account is locked. Please contact your administrator
Issue description Users encounter the error message "Unable to log you in because your account is locked. Please contact your administrator" when trying to log in to ADSelfService Plus. This error occurs when a user tries to log in with a locked-out ...Resolving the error SAML assertion attribute limit exceeded. Please contact your administrator
Issue description The error SAML assertion attribute limit exceeded. Please contact your administrator occurs when a user attempts to log in to a SAML application via ADSelfService Plus. Possible cause The total number of attributes or attribute ...Error: Your password has expired. Please contact your administrator
Issue description Users encounter the error message "Your password has expired. Please contact your administrator" when trying to log in to ADSelfService Plus with an incorrect password while their Active Directory (AD) password has already expired. ...Error: Permission denied. Please contact your administrator
Issue description Users may encounter the error message "Permission denied. Please contact your administrator" when attempting to: Log in to the ADSelfService Plus portal for enrollment. Perform a password reset or account unlock. This error prevents ...