1625723 - Error "Your login ID is not valid open SessionLogon with user info has failed" when login in BOE using Vintela SSO

• Cannot login to Desktop Intelligence 2-tier mode (with both manual AD and SSO)
• Can login to Desktop Intelligence 3-tier mode
• Cannot login to Universe Designer 2-tier mode
• Can login to Infoview with manual AD
• Infoview SSO works fine only when IP address is used within the URL: error "Page cannot be displayed" is received when machine name is used instead
• Only some users are facing the issue (usually users belonging to the same group)
• In BI 4.1 the error "Internet Explorer cannot display the webpage" was displayed due in part to the bug in KBA 1919245
• Instead of automatic SSO a manual logon page is received (manual logon works even though manual logon failing is also a symptom)
• On an AD workstation with kerberos tracing enabled you may see Event ID 6 "KERBEVT_INSUFFICIENT_TOKEN_SIZE" "The kerberos SSPI package generated an output token of size ###### bytes which was too large to fit in the token buffer size of 12000 bytes provided to process ID ####" and "The output SSPI token being too large is probably the result of the user username@domain.com being a member of a large number of groups" and "It is recommended to minimize the number of groups a user belongs to. If the problem can not be corrected by reduction of the group memberships of this user, please contact your system administrator to increase the maximum token size, which in term is configured machine-wide via the following registry value: HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters\MaxTokenSize"

• SAP BusinessObjects Enterprise XI 3.1 any SP
• SAP BusinessObjects Business Intelligence Platform BI 4.x also any SP
• Any Microsoft Windows OS involved in the communication when SSO or AD auth is performed. 
• Windows Server 2008 64bit
• Windows 7

KBA , BI-BIP-AUT , Authentication, ActiveDirectory, LDAP, SSO, Vintela , Problem