3440428 - "Invalid Login" error when accessing SuccessFactors instance via Identity Authentication

• SuccessFactors instance is integrated with Identity Authentication (IAS) as the identity provider or Identity Authentication as the proxy with a separate corporate identity provider.
• The following "Error: Invalid Login: Your account may be locked, inactive, or not included in the default user group. If your organization uses SSO, it may be not working correctly." is seen after a successful authentication when accessing the SuccessFactors instance.
• After resetting the password, the browser redirects to a page showing “Invalid Login” instead of logging into SuccessFactors.

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental. 

• SAP SuccessFactors HCM Suite
• Identity Authentication Services
• SAP SuccessFactors Onboarding

invalid login, username, loginname, Subject Name Identifier, SF, IAS, locked, inactive, SSO, permission@sf_validate, reset password, Onboardee, Onboardee Identity Authentication,  browser, , KBA , LOD-SF-PLT-IAS , Identity Authentication Services (IAS) With BizX , BC-IAM-IDS , Identity Authentication Service , LOD-SF-OBX-IAS , IAS User Authentication , Problem