# Failed secondary authentication

**URL:** <https://forum.pritunl.com/t/failed-secondary-authentication/1893>\
**Category:** Pritunl VPN\
**Created:** [March 10, 2024, 9:42am UTC](https://forum.pritunl.com/t/failed-secondary-authentication/1893 "2024-03-10T09:42:51Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![meoptimusprime](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/m/858c86/32.png) [@meoptimusprime](https://forum.pritunl.com/u/meoptimusprime)\
**Post date:** [March 10, 2024, 9:42am UTC](https://forum.pritunl.com/t/failed-secondary-authentication/1893/1 "2024-03-10T09:42:51Z")

</div>

Users are not able to connect, they get error.  
Client side it gives error **“Failed to Authenticate”**  
and at server side the error is **" ERROR User open ovpn failed “Failed secondary authentication” "**  
If we bypass secondary authentication in user settings, then it works.  
Note: User type is Okta.

---

<div class="post-metadata">

**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\
**Post date:** [March 12, 2024, 10:24pm UTC](https://forum.pritunl.com/t/failed-secondary-authentication/1893/2 "2024-03-12T22:24:28Z")

</div>

Check the logs in the top right of the web console for the full error message.

---

<div class="post-metadata">

**Author:** ![meoptimusprime](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/m/858c86/32.png) [@meoptimusprime](https://forum.pritunl.com/u/meoptimusprime)\
**Post date:** [March 13, 2024, 8:20am UTC](https://forum.pritunl.com/t/failed-secondary-authentication/1893/3 "2024-03-13T08:20:25Z")

</div>

please find attached screenshot from system logs of server.

 ![Screenshot 2024-03-13 at 11.16.50 AM](https://forum-static.pritunl.com/original/1X/ff83631fb6004b187fc26d23aa2327c159cdebf3.png)

---

<div class="post-metadata">

**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\
**Post date:** [March 14, 2024, 4:48pm UTC](https://forum.pritunl.com/t/failed-secondary-authentication/1893/4 "2024-03-14T16:48:50Z")

</div>

The Okta API token will need to be updated. This is documented in the [**Okta single sign-on**](https://docs.pritunl.com/docs/okta) documentation.