Question: Why do we get cryptic messages when logging in? Why can't you give a clear message?

Answer: Security

In LoginHub we have tools, like the user test buttons (use these when you have most users working but one that isn't, use these when no users are working - pick one to start with) to show you what you have set up wrong either for that user or for all users,

There are generally 2 levels that login fail:

1. Your Identity provider (AD, Entra, Auth0, Ping etc..,) says "nope, you aren't allowed". In this case we often just get back a "no" or "error" with no other information. It could be a serious security flaw to tell us anything more - so they don't even if we wish they did so we could help you!
2. Your Identity provider says "yes" but the info it passes us, looking at your setup in LoginHub says 'no'. This usually is a group mapping error. But we do NOT tell that to the user, the user is just told that they were successfully authenticated, but they don't have permission to use the system. It would be a serious security flaw for us to give any details about why. But ... if you have access to the Admin screens, the user test button is great for this - it shows you the administrator, in a secure location, why the user was determined by your rules to not be authorized - allowing you to fix it either in your LoginHub group mappings, or by going into your Identity provider and giving the person the correct role(s).