How to resolve an 'Invalid credentials (#MTI_7)' error when logging in with a default local account, like a tenant admin?
Issue Description:
The 'Invalid credentials (#MTI_7)' error is the Orchestrator general error for an account email or password mismatch or from API calls where there is a bearer token mismatch.
For default local accounts, such as Host or Tenant admin accounts, where the password is not expected to change frequently, this error may indicate a recent password change or a misconfiguration requiring additional investigation.
Resolution:
- In situations where a user has lost their password, they should use the documented password reset process.
- If a user who has recently reset their password receives the Invalid credentials (#MTI_7) error, follow this article on updating the Orchestrator certificate, Invalid Credentials (MTI_7) error, when resetting an user password.
- For most situations where control of a default local account has been lost, such as with an organizational change, control can be regained by resetting the admin password.
- If these options do not enable accessing these accounts, there may be additional factors preventing account recovery. To help us identify the specific circumstances in your situation, please share with your support case the output of the following SQL query specific to your scenario:
-- Default tenant admin
SELECT * from [%UIPATH ORCHESTRATOR DATABASE NAME%].[identity].[AspNetUsers]
where Name = 'Organization' and Surname = 'Administrator'
-- Host tenant admin
SELECT * from [%UIPATH ORCHESTRATOR DATABASE NAME%].[identity].[AspNetUsers]
where
Id = (SELECT anu.Id
FROM [%UIPATH ORCHESTRATOR DATABASE NAME%].[identity].[AspNetUsers] anu
join [%UIPATH ORCHESTRATOR DATABASE NAME%].[identity].[Partitions] p on p.Id = anu.MasterPartitionId
join [%UIPATH ORCHESTRATOR DATABASE NAME%].[identity].[Tenants] t on t.PartitionId = p.Id
where UserName = 'admin'
and t.Name = 'host')