The following topic applies only if you are setting up a SAM authorization server using a software version before update 23.
Web Client users must be members of a group that has been given access to the Smart API that is used by the Web Client.
If there are any users that are not a member of a group defined in the identity provider, you can define them in Smart API Manager and then add them to a group.
For instructions, see the following topics in the Smart API Manager Help:
If necessary, you can also add credentials from an external identity provider for the user to allow them to login. For instructions, see Add external identity provider credentials to a user.