APM access denied

Hi,

Do you have ACL's configured in the access policy?
Or possibly the SSO/Auth Domains against the policy needs checking?
Are you using one domain or multiple domains or subdomains?
they all need noting in the SSO?Auth Domains section.

Also, if you look in access / overview / active sessions.
on the session you have open click on variables, and you should be able to see the path your applcation went along the access policy. Does it follow the path you are expecting?

Also permissions might be linked to AD or radius auth and the user doesn't have the correct permissions set.
this can also be checked under the variables of the session against the user. If that makes sense?