Troubleshooting User Access

"Your account has not been granted access"...

This series of steps will grant the user the group memberships required to access Game Warden hosted applications while eliminating possible cached credential issues.

1. Open Chrome in Incognito mode and with their CAC inserted
   

2. Browse to https://login.dso.mil.
   

   Note

   If you have not already, you will be prompted to associate your CAC with your P1 account.

3. Browse to http://login.afwerx.dso.mil/.
   

   Note

   If you have not already, you will be prompted to associate your CAC with your Game Warden account.

4. Return to your original application URL and try again.

"Oops, your session has expired. Please try again"

This can occasionally happen if a previous authentication gets stored in your cache. When this happens you can go up to the URL, delete the .mil portion of the website, and reenter it back in. Once this happens the URL should reset and it will ask you to provide your Platform One credentials. If the first reset of the URL comes up with the same error, attempt this at least two more times. if that doesn’t resolve your issue, please contact us via Slack.

"Game Warden Account Disabled""

Inactive users will have their accounts disabled after 30 days of inactivity. They will receive an email notification with steps to restore their account.

See here for more information.

Troubleshooting Game Warden Hosted Application User Access from NIPRNet- blank page / timeout

These instructions are used for determining why a user on NIPRNet may be having trouble accessing an endpoint(s). Perform these steps if the user is reporting that they are timing out or receive a blank / white page when attempting to access applications. If your user reaches out to us, our engineers will respond with a meeting request.

Note

Screenshots are not necessary.

Prerequisites

Ensure the user has created a P1-SSO account, has configured their CAC/ECA/PIV for access to IL4+ environments AND associated their CAC with the Game Warden keycloak.

• Your end-user MUST complete all steps for association of CAC/ECA/PIV from the links above before continuing the process for individual access troubleshooting.

Note

Success would be a webpage loading with a login prompt. Failed tests would result in a blank page, or a timeout.

Local Firewall Test

Attempt to reach the following URL: https://login.dso.mil

Success

OUTBOUND GOOD. Proceed to P1/CNAP Test.

Failure

Contact your local network support to remediate.

P1/CNAP Test

Attempt to reach the following URLs: https://code.il4.dso.mil

Success

Will display "Your account has not been granted access to this application group yet." CNAP PASS THROUGH VERIFIED. Proceed to AFWERX Test.

Example Result

Failure

Whitelisting with P1 needed. Proceed to Information Collection for CNAP Whitelisting below.

AFWERX Test

Attempt to reach the following URL: https://grafana.il4.afwerx.dso.mil

Success

GAME WARDEN SERVICES ONLINE.

Failure

Potential issue with AFWERX or GAMEWARDEN.
Notify cnaphelp@secondfront.com with a Subject of OUTAGE. Please provide the Application URL you are attempting to access, along with:
Local Firewall Test: PASS / FAIL
P1/CNAP Test: PASS / FAIL
AFWERX Test: PASS / FAIL

Information Collection for CNAP Whitelisting

1. Gather IP address for CNAP whitelisting

   Tip

   The most effective course of action is to enlist the assistance of your network administrator to gather all applicable IP ranges necessary for your agency. Request this information in “CIDR” format.

Security settings may only allow use of one of the following options.
- From Command Prompt (Windows Key + R type cmd) type ipconfig
- Copy the IPv4 Address
OR
- From Powershell (Windows Key + R type powershell) type ipconfig
- Copy the IPv4 Address

1. Provide the following information to the Gamewarden team via email at cnaphelp@secondfront.com

   • Results of the 3 URL tests and status of making a P1-SSO account.
     
   • User’s name
     
   • User’s service branch
     
   • User’s base/location
     
   • User’s email
     
   • User’s phone
     
   • Ip address or CIDR range
     
   • Application being accessed
     

Your user may also provide the above information directly to CNAP here.

Why don’t I already have CNAP Access?

See CNAP Whitelist for more information.

Verification email from P1 not received

Check spam filters, check user's network policies as they may block emails from P1.

Return to Help Center Home