Unable to link accounts in MVISION Cloud Bridge (multifactor authentication enabled)

Technical Articles ID: KB93420
Last Modified: 6/2/2022

Environment

MVISION Cloud Bridge (CB) 2.1, 2.0 extensions
ePolicy Orchestrator (ePO) 5.10.x (on-premises)
MVISION ePO

Summary

While integrating MVISION Insights into ePO on-premises, you're unable to link the MVISION account in the MVISION Cloud Bridge settings page. You followed the steps outlined in the section "Update your server settings to link your server to MVISION" in the MVISION Insights Product Guide.

You see the error below in the ePO console:

Unable to get access/registration token from IAM service for the provided account credentials. See orion.log for
details.

You see the error below in the Orion.log file:

ERROR [http-abc-9085-exec-102] registration.RegistrationProxyImpl - getAccessToken received HTTP status 401. IAM URL: https://iam.mcafee-cloud.com/iam/v1.0/token msgBody: grant_type=password&scope=epo.reg_token&username=abc.def%40test.com&password=********&client_id=0oawz1wagXnxG7lUr2p6

ERROR [http-abc-9085-exec-102] action.CloudBridgeServerSettingsAction - Cloud Bridge registration failed, IAM error code: 401 "Token Endpoint: Password grant: Error: invalid_grant - Resource owner password credentials authentication denied by sign on policy."
com.mcafee.epo.cloudbridge.RegistrationException: Could not get access token from IAM service with scope(s) epo.reg_token.

Cause

Multifactor authentication is enabled for the MVISION ePO user account. Multifactor authentication is used to link to MVISION Cloud Bridge and MVISION ePO Migration extension.

When configured with two-factor authentication, these connectors can't authenticate to the MVISION resources and obtain an access token.

Solution 1

This issue is scheduled to be resolved in MVISION Cloud Bridge 2.2, which isn't currently available.

NOTE: Any future product functionality or releases mentioned in the Knowledge Base are intended to outline our general product direction and should not be relied on, either as a commitment, or when making a purchasing decision.

To receive email notification when this article is updated, click Subscribe on the right side of the page. You must be logged on to subscribe.

To receive information about product updates, sign up for the Support Notification Service.

Solution 2

Other issues are documented that incur the same errors, but have a different cause and solution.

These issues are collated in KB94931 - Troubleshooting unable to link accounts in MVISION Cloud Bridge.

Workaround

Disable Multifactor authentication in MVISION ePO:

Open MVISION ePO.
Click Menu, Configuration, Users & Roles.
Disable the Multi-factor Authentication option.
Deselect Require Multi-Factor Authentication in the upper-right corner.
Close the MVISION ePO browser or log off.
Open MVISION ePO and log in to MVISION with the account used to link to the cloud bridge.
Click the people icon at the top right and select My Profile.
Disable the user profile Two-Factor Authentication.
Click Save Changes.

Affected Products

ePolicy Orchestrator 5.10.x
Known Issue/Product Defect
MVISION ePO

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Japanese
Portuguese Brasileiro
Chinese Simplified

Knowledge Center

Unable to link accounts in MVISION Cloud Bridge (multifactor authentication enabled)

Environment

Summary

Cause

Solution 1

Solution 2

Workaround

Affected Products

Languages:

Title

Title

Knowledge Center

Unable to link accounts in MVISION Cloud Bridge (multifactor authentication enabled)

Environment

Summary

Cause

Solution 1

Solution 2

Workaround

Affected Products

Languages:

Choose your region

Title

Title