“You do not have access to this platform”: The user’s account has not been provisioned yet. Check that they are in one of the TOTAL groups assigned to the application, then trigger an on-demand sync for the group.
“Account is deactivated”: The user was removed from the TOTAL group and the change has synced. Re-add them to the group and provision the group on demand.
Sign-in redirects back to the login page with no error: Try a private/incognito browser window. If that works, clear cookies in the main browser.
Provisioning shows errors in Azure: Check that the SCIM Tenant URL and Secret Token are entered correctly with no trailing spaces. Click Test Connection to verify. If the connection fails, contact your TOTAL representative to confirm the endpoint is active.
Users provisioned but cannot sign in: The externalId attribute mapping (Part 4, Step 4.2) was likely not set to objectId. Go back and verify the mapping, then contact your TOTAL representative to re-sync the provisioning data.