Problem
When trying to sign into the HCP portal with SSO configured for the HCP organization, you may encounter the "Wrong email or password" error message after entering your SSO email or after authenticating with your Identity Provider (IdP).
Cause
This error is typically caused by one of the following:
-
Misconfigured Domain in SSO Settings
- The domain configured in the HCP SSO settings does not match the domain under which the user is registered in Entra ID.
-
Incorrect Password
- The user may have entered the wrong password during authentication.
Solutions
1. Mismatch of Domains in SSO Settings
Ensure that the domain under which the user is registered in Entra ID matches the domain configured in the HCP SSO settings.
For example:
- The domain configured in the HCP SSO settings is
@sso-mahi.kamat.casa.
- The user eshant is registered under the domain
@kamat.casa.
In this case, the "Wrong email or password" error will occur because the domains do not match.
Steps to Correct the Domain Mismatch:
- Search for the user in your Entra ID portal.
- Select the user account (e.g., eshant).
- Click Edit Properties.
- Update the User's Domain to match the domain configured in the HCP SSO settings (e.g.,
@sso-mahi.kamat.casa).
2. Incorrect Password
If the domain is correctly configured, the issue may lie with the password entered by the user. If the user has forgotten their password or entered it incorrectly, you can reset it.
To reset the user's password, follow the steps in the Microsoft Entra ID password reset guide.
Conclusion
By ensuring the domain is correctly configured and verifying the user’s credentials, you can resolve the "Wrong email or password" error when attempting to log in to HCP with OIDC SSO and Entra ID. If you continue to experience issues, please reach out to support for further assistance.
Additional Resources:
For more information on troubleshooting SSO-related errors, please refer to the following articles: