We are currently facing issues in setting up the SSPR on the FIM 2010 installation
Actions done:
Installed SQL,FIM Service, Portal and SSPR sites on the same box
Followed all the instructions to set up SSPR as per installation guide
Used FIMPassword as the App Pool account for the SSPR sites (the same service is used for FIM installation)
Created the following SPNs
Verified all the MPRs and the Password Reset
For all the test accounts we have edited the property “AuthN Workflow Registered” to “Password Reset AuthN Workflow”
Verified the “Password Reset Users Set” and all the users are in this set
Observed Issues
Though all users are able to log into FIM portal, none of them are able to use the SSPR features. (The home page opens up for everyone, but beyond that we are facing issues described below)
After pressing Next on the first screen we observe the following error message
Ensure you enter your user name correctly. If you still cannot reset your password, please contact your helpdesk for assistance. (Error 3001)
The detailed message is:
The supplied request content violates system rules.
Event log :
Log Name: Forefront Identity Manager
Source: Microsoft.CredentialManagement.ResetPortal
Date: 4/4/2013 3:42:47 PM
Event ID: 3
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: WIN-391G4CQQSCF.fim.test.com
Description:
The error page was displayed to the user.
Details:
Title: Access denied.
Message: Error processing your request: The operation was rejected because of access control policies.
Source: The supplied request content violates system rules.
Attributes:
Details: The Request contains changes that violate system constraints.
CorrelationId: ddc58752-221c-4ef2-a0f0-c016025312ab
RequestId: 10f823ae-11e5-4897-8c45-bae6521e9095
ErrorCode: 3001
Please let us know if there are any other steps that we are missing. We are struck in this step for over a week and would really appreciate any help provide..
Note:I tried reinstalling FIMService & modifying the application pool as well.
Appreciate any help in this
Thanks,Vadiraj