Citrix Workspace login incorrect username or password (only 1 user affected)

[expert]

Hello,

we have an issue that 1 user is not able to login via Netscaler (Citrix Workspace). The user insert username/password when launch Citrix Workspace, confirm MFA (MS Authenticator) and then the message "incorrect username or password" appears.
The problem we have only with 1 user at the moment, the other user can login without problems. Already tried different pc, same behavior. The login for the affected user already worked without problems and stopped suddenly working.

We are using Netscaler NS13.5.55.34.nc

Any ideas what can be the cause?

kind regards,

Juergen

[expert]

Hello,

I figured out that the issue comes from the UPN (FAS server), but the UPN and password are 100% correct. Verified in the attributes in the AD

[expert]

found the issue/solution

on the affected ad user for some reason the following security flag was not set anymore and prevented the start of the application:

"Windows Authorization Access Group“  -> „Read tokenGroupsAndUniversal“

see https://muelab.de/2021/10/citrix-authentication-federatedauthenticationservice-s102-error/

regards,

Juergen