Resolving Google "403: app_not_enabled_for_user" via SAML SSO

If you encounter the error message "403: app_not_enabled_for_user" while trying to access Digital Theatre+ using SAML SSO via Google Workspace, it indicates that the user attempting to log in has not been granted access to Digital Theatre+

Explanation

This error means that the user has not been enabled for the Digital Theatre+ application in your Google Workspace SAML configuration.

This issue cannot be resolved by Digital Theatre+ and must be addressed by your school's IT team.

403 app_not_enabled_for_user

 

What to Do

To resolve this issue, please follow these steps:

1. Verify User Access

  • Check User Access:
    • Ensure that the user experiencing the error is enabled for the Digital Theatre+ application in your Google Admin Console.

Steps for IT Team to Enable Users

  1. Navigate to Google Admin Console:

    • Go to the Google Admin console and select Apps > Web and mobile apps.
  2. Select Digital Theatre+:

    • Find and select the Digital Theatre+ SAML app.
  3. Enable Users:

    • Under User access, ensure the user is enabled for the Digital Theatre+ application.
    • If the user is not listed, click on Assign and add the user to the application.
  4. Save Changes:

    • After enabling the user, save the changes and have the user try logging in again.

Additional Help

If you need further assistance, please contact your IT team or refer to Google's documentation on managing SAML applications and user access.