Problem:

An error is returned on the Domino server console:

"Server reported the following problem causing authentication to fail: User's policy does not allow password authentication with the ID vault. Password has not been reset.".

Condition:

This error is returned when a Notes Federated Login (NFL) enabled SAML user, logs into the Domino server via a web browser AND the Domino NFL policy settings document, (Policy Settings/Password Management/Federated Login tab), for that NFL enabled user has the following field on that policy set to "No".

Result:

The user is able to authenticate with the Domino server and gain access to their mail file, but unable to download a copy of their Notes ID file,

The last sentence in the error message, "Password has not been reset", is completely irrelevant and can be ignored.

The error message will updated in a later release.