User able to access IFS Cloud Web but not MWO

Hi

Have you checked that MWO is granted to a functional role under this place in IFS Cloud 
Mobile Apps / Administration / Security Grants and Entity Filters / Security Groups by Permission Set 

Also for your information,  Mobile App User Details will not contain any users before they have been able to successfully login into MWO Service app.

Hi

Here is a step by step guide to check what is going wrong 

 

• Can the user log into IFS Cloud Web?
  • If not, it's a genuine authentication issue (password, identity provider, account lockout, etc.).
  • If they can log into the web client but not MWO, the issue is likely MWO-specific.
    • This we know is MWO Specific
• Does the user have the required permission sets?
  • The user needs access to the MWO projections and the functional role permission set MOBILE_APP_RUNTIME to log into IFS Cloud Mobile.
    • I think you have this, but please check
• Is the resource configured as a mobile user?
  • In Resource Detail, the resource must be enabled for Mobile Work Order use, and mobile-user setup must be completed.
    • Please check if you have set this up
• Verify the server URL
  • A common issue is users pointing the app at the wrong environment (test vs production) or an incorrect base URL.
  • If the URL is wrong, the login screen often reports authentication failures even though credentials are correct.
    • Usually gives another error message, but if you are using Android or iOS you need to have a secondary URL as your coming outside your WIFI and firewall
• Identity Provider / SSO
  • If you're using Azure AD, Okta, ADFS, or another external identity provider, check whether:
    • SSO certificates have expired.
    • Redirect URLs are correct.
    • The user exists in the IdP and is assigned to the application.
  • If you ar enot using SSO you can skip checking this. 
• Are all users affected or just one?
  • One user: usually permissions, mobile resource setup, or account issue.
  • All users: usually URL, certificate, identity provider, or mobile middleware configuration.
• Check server logs
  • In IFS Cloud, the application logs will usually show the real reason even when the app only shows "Invalid Username or Password."
    • Check if the server Pods are up and running under Mobile Apps / Administration / Synchronization Service Nodes. You should have at least one record here. 

There might be more to check, like if you have any Firewall security in your company preventing calls  and also if the correct certificates are installed correclty, but lets start with the above.