KB-2394 InvalidUserException when authenticating via OpenID Connect
Symptoms
- The below lines are observed in the tomcat-stdOut.log:
WARN com.appiancorp.security.auth.oidc.OidcAuthenticatorWrapper - Received InvalidUserException for user <USERNAME> due to exception cause: nullcom.appiancorp.suiteapi.common.exceptions.InvalidUserException: [InvalidUserException]
ERROR com.appiancorp.security.auth.AppianAuthenticationProvider - Error while trying to authenticate the token: OidcAuthTokenImply>
-
Authentication fails with a 401 error on the front-end when redirected to Appian.

Cause
The above symptoms may occur due to a username casing mismatch between Appian and the OpenID Provider. Usernames in Appian are case-sensitive, so if the casing of the username configured with the OpenID Provider does not match the one in Appian, login will fail.
Action
To remediate this behavior, update the username configured in Appian or the OpenID Provider so that they match.
- On the Appian side, the username can be modified by following the steps listed in the documentation.
- Otherwise, please reach out to your OpenID Provider for further assistance with modifying usernames on their side.
Affected Versions
This article applies to all versions of Appian.
Last Reviewed: August 2026
