Troubleshooting

Use this section when VaultPAM is not behaving as expected. Start with the symptom you see, then open the matching runbook.

Common problems

Symptom	Guide
Connector is offline, degraded, or needs recovery	My connector is offline
Connector health check is red	Connector health check is red
MFA code is rejected	My MFA code is rejected
RDP session disconnects unexpectedly	My RDP session disconnects unexpectedly
SSH session fails to launch	My SSH session fails to launch
Cannot log in with SSO	I cannot log in with SSO
Password checkout fails or vault is locked	Password checkout fails or vault is locked
Approval request was not received	My approval request was not received
Recording playback fails	Recording playback fails
Cannot see expected resources or safes	I cannot see expected resources or safes
Permission denied error	I get a permission denied error
Audit log shows no events	The audit log shows no events

Before you contact support

• Exact time the issue started
• Org name and username affected
• Connector name, session ID, or target host, if relevant
• The last visible error message or log fragment

If the problem involves a connector, confirm whether it still reaches the control plane and whether its durable identity storage is intact.