Login Error 3606: [AuthValidate] Failed to Validate User

When trying to log in you see this error:

Login Error 3606: [AuthValidate] Failed to Validate User

It may look like the image below.

• You are logging in to a different environment to that which is set in your registry (usually experienced by testers, developers and other specialist users).
• The user profile has been closed.
• You have renewed your smartcard certificates and this error has begun to occur.

If you are using an Imprivata or Isosec smartcard

These smartcards are not supported by NHS England. You should contact your local IT team for help.

All other smartcards

You will need to get support from your local IT team. Depending on your organisation, this may be through your IT helpdesk, or via a dedicated Registration Authority team.

Each organisation is set up differently, so we cannot provide contact details that work for everyone. Check your intranet for links to an IT helpdesk, Registration Authority or smartcard team.

Imprivata or Isosec smartcards

These smartcards are not supported by NHS England. You should contact Imprivata or Isosec directly.

Check for a closed profile

This error would show if the user's Care Identity profile has been closed. Go to Care Identity Management and check the user's profile. If it has been closed in error a Registration Authority can reopen it and issue a new smartcard.

Other solutions

Smartcard problems are almost always traced back to incorrect software or device setup. The most common cause is that the workstation has incorrect smartcard reader drivers installed. For more guidance, see troubleshooting-smartcard-management-issues.

Reissuing a smartcard should be a last resort, and only attempted after following the steps in troubleshooting-smartcard-management-issues, including reporting the issue to the National Service Desk.

Return to the troubleshooting hub.