This article covers several issues, and how to overcome the problems. Often the exact same error is shown in the CB Server Settings page, and sometimes a common error is also recorded in the ePO on-premises logs. The common errors make it a little hard to locate the cause and resolve.
The following advice is provided in the
MVISION Cloud Bridge 2.0.0 Installation Guide, under the error message section:
This error occurs if there is an issue connecting to the MVISION backend service or if the MVISION account that is associated with the email address entered is not found. This error also occurs if you type an incorrect email credential or with a valid email address and an incorrect password.
The above advice doesn’t cover all causes that can lead to the CB link falling.
You’re unable to link your ePO server to the MVISION account via the MVISION Cloud Bridge extension, after following the steps in the
MVISION Cloud Bridge 2.0.0 Installation Guide.
Console
Error |
Unable to get access/registration token from IAM service for the provided account credentials. See 'orion.log' for details |
Orion.log Error |
n/a |
Cause |
This error can occur if the MVISION account that is associated with the email address entered isn’t found.
This error also occurs if you type an incorrect email credential, or with a valid email address and an incorrect password. |
Solution |
Enter a valid email address.
Or
Enter a correct password.
If you’re unable to resolve, speak to your system administrator. |
Console Error |
Unable to get access/registration token from IAM service for the provided account credentials. See 'orion.log' for details |
Orion.log Error |
ERROR [http-nio-8443-exec-19] registration.RegistrationProxyImpl - Unable to check multi-tenancy of the given user account: <email_address>
org.apache.http.conn.HttpHostConnectException: Connect to uam.mcafee-cloud.com:443 [uam.mcafee-cloud.com/99.84.199.12, uam.mcafee-cloud.com/99.84.199.55, uam.mcafee-cloud.com/99.84.199.114, uam.mcafee-cloud.com/99.84.199.59] failed: Connection timed out: connect |
Cause |
The ePO server is behind a proxy network, and The Proxy settings aren’t configured in the ePO on-premises Server Settings page. |
Solution |
The ePO administrator must add the Proxy server details to the ePO on-premises Server Settings page.
For help with configuring the e proxy setting, see the ePolicy Orchestrator 5.10.0 Product Guide. |
Related Article |
KB94929 - Unable to link accounts in MVISION Cloud Bridge (Proxy settings) |
Console Error |
Unable to get access/registration token from IAM service for the provided account credentials. See 'orion.log' for details |
Orion.log Error |
ERROR [http-nio-8443-exec-19] registration.RegistrationProxyImpl - Unable to check multi-tenancy of the given user account: <email_address>
org.apache.http.conn.HttpHostConnectException: Connect to uam.mcafee-cloud.com:443 [uam.mcafee-cloud.com/99.84.199.12, uam.mcafee-cloud.com/99.84.199.55, uam.mcafee-cloud.com/99.84.199.114, uam.mcafee-cloud.com/99.84.199.59] failed: Connection timed out: connect |
Cause |
A firewall has blocked the URLs related to MVISION Cloud Bridge, causing the account linking to fail. |
Solution |
The administrator must allow the needed URLs in their firewall settings:
See the article below for details. |
Related Article |
KB94930 - Unable to link accounts in MVISION Cloud Bridge (Firewall issue) |
Console Error |
Unable to get access/registration token from IAM service for the provided account credentials. See 'orion.log' for details |
Orion.log Error |
ERROR [http-abc-9085-exec-102] registration.RegistrationProxyImpl - getAccessToken received HTTP status 401. IAM URL: https://iam.mcafee-cloud.com/iam/v1.0/tokenmsgBody: grant_type=password&scope=epo.reg_token&username=abc.
def%40test.com&password=********&client_id=0oawz1wagXnxG7lUr2p6
ERROR [http-abc-9085-exec-102] action.CloudBridgeServerSettingsAction - Cloud Bridge registration failed, IAM error code: 401 "Token Endpoint: Password grant: Error: invalid_grant - Resource owner password credentials authentication denied by sign on policy."
com.mcafee.epo.cloudbridge.RegistrationException: Could not get access token from IAM service with scope(s) epo.reg_token. |
Cause |
Multifactor authentication is enabled for the MVISION ePO user account. Multifactor authentication is used to link to McAfee MVISION Cloud Bridge and MVISION ePO Migration extension. |
Solution |
This issue is scheduled to be resolved in MVISION Cloud Bridge 2.2, which isn’t currently available.
In the interim, implement the workaround documented in the Related Article below. |
Related Article |
KB93420 - Unable to link accounts in MVISION Cloud Bridge (Multifactor authentication enabled) |