Why Can't Custom Admin Users Log In to USG FLEX?

Zyxel_Emily

Question:
When a new admin user is created on the USG FLEX, logging into the Web GUI with this account fails, showing a "login denied" message.

Answer:
The issue arises because the "default" profile for the WWW authentication method is configured to use only "ad" (Active Directory). Therefore, admin accounts not found in the AD server are denied access. To resolve this, include the "local" authentication method in the "default" profile by navigating to the authentication settings via the Web GUI.

1. Go to Configuration > Object > Authentication > Auth. Method.
2. Edit the "default" profile and add "local" as an authentication option.
3. Check Two-Factor Authentication (2FA): Ensure that 2FA is disabled for the custom admin accounts to allow successful login.

Recommendation: Always review the authentication settings whenever adding new admin users. This ensures compatibility with the login methods used in your system.