Hi @RupaJ ,   The first approach would be to use fallback authentication. If you have IWA configured with fallback authentication( details in SAS Middle-Tier Administration Guide), then you could use a browser that is not configured for IWA. That should let you fallback to default login prompt.   Another approach would be to use an Administrative account that is configured prior to configuring IWA/Web Authentication:     Middle-Tier Administration Guide has a note under "Configuring Web Authentication " section like this:    "Before you perform this procedure, make sure that you grant administrators access to SAS Environment Manager. Once web authentication is configured, internal accounts like sasadm@saspw are unlikely to exist in the authentication provider that you use for web authentication"   So if you have already configured an Administrative account , you could use IWA account.    Hope this helps         ... View more

It is best to open a Technical Support track for this issue as we may have to look at the complete SAS Logon log and also network trace/screenshots to see what the exact errors are. We may also have to enable additional debugging ... View more

  The realm definitions in server.xml totally depend on what attributes are supported by your LDAP. By ADFS, do you mean Active Directory Federation Services?   In any case a sample Realm for Active Directory LDAP would look like this:' <Realm className="org.apache.catalina.realm.JNDIRealm" debug="true" allRolesMode="authOnly" connectionName="CN=username,OU=Organization unit,DC=sample,DC=com" connectionPassword="password" connectionURL="ldap://xxx.sss.com:389" userSearch="(sAMAccountName={0})" />     Another one could be:     <Realm className="org.apache.catalina.realm.LockOutRealm">         <Realm className="org.apache.catalina.realm.JNDIRealm"                 allRolesMode="authOnly"                 connectionURL="ldap://sample.demo.com"                 userPattern="{0}@sample.demo.com"         /> </Realm>   It again totally depends on what attributes are supported by your LDAP and you can use tools like ldapsearch to identify the correct pattern for user search in your LDAP.   Also here is an external link on some JNDI Realms, for reference   https://wiki.apache.org/tomcat/JNDI_HowTo ... View more