Signals Clinical: Resolving SCL 'Access Denied' Issues Due to Email Mismatches, when attempting to log in

Description

SCL invitations failed for new users leveraging Single Sign-On due to mismatches between IdP-provided email and invited user email addresses. This resulted in login errors and 'Access Denied' messages.

Solution

To address the issue: 
• Ensure the Identity Provider (IdP) is configured to pass the user’s invite email in the SSO assertion. If these email addresses are not the same, then login is expected to fail.
• Alternatively, re-invite the user with the email currently being passed by the IdP. 
• If necessary, manually update permissions for affected users using the administrative configuration tools.