Problem

After a domain is entered on the user object in APM, the user can no longer sign in.This occurs even though the domain validates inside of APM.

Solution

Domains entered in APM cannot include the sub-domain.

For example, if your domain is apm.bentley.com, you must enter only apm as the domain on the user object.