Users rejected due to unmatched domain in authentication module

Problem

Some users may be rejected when attempting to access License Vault, even though they appear to belong to the correct email domain. The error typically states that the user’s email does not match the restricted domain configured for the authentication module.

Cause

This can happen when multiple authentication methods are enabled and users sign in through a method other than the intended default provider. For example, an alternative login method such as JetBrains Account may still be active while the intended provider is Microsoft Entra ID. If users authenticate through the wrong method, the account details returned during sign-in may not match the domain restrictions configured for that authentication module, which can result in login failure.

Resolution

Review the authentication configuration and confirm the following:

• Only the intended authentication provider is enabled, or unused providers are disabled
• The correct provider is configured as the default login method
• Affected users are signing in using the intended authentication method

For troubleshooting, ask affected users to open IDE Services in a private or incognito browser window, select Try other login options, and sign in using the correct provider. This helps rule out cached sessions or incorrect login routing.

Once the correct authentication method is set as default and users sign in through the intended provider, the domain mismatch issue should be resolved.