If your sign-on attempt fails, the following generic message might display:

Invalid username/password or not allowed to sign on from this location

This is often not a password or username issue. For example, it can be as simple as using a new laptop or mobile device that lacks the client certificate that identifies you to the MOVEit Transfer site or organization you are trying to access.

Note: When your MOVEit Transfer password is about to expire, you will receive an email notification. If you are certain you need to reset your password, see the topic titled Change Your Password. If you think you are locked out of MOVEit Transfer because of too many failed attempts to connect, see the details listed in the section titled Common Reasons Access is Denied (and workaround tips).

Typical Controls Used to Secure Your Site (but can block your access)

This section helps you understand and work within typical security and user management policies that help secure your site. If you ignore policy controls, it can affect access to a system. See the section Common Reasons Access is Denied (and workaround tips) for next steps and self-help tips for signing on. Security and user management controls can apply policies such as the following:
  • Restrict site or organization access if a threshold was exceeded. This policy behavior occurs when a user attempts to exceed a file or package download limit or exceed a duration ("time window") that the user account was configured to remain active. Time and download limits are typically applied to users that need infrequent or one-time access (such as temporary and guest users).
  • Require a client certificate. You might need to use your smart card or other client certificate-enabled device to verify your identity to MOVEit Transfer.
  • Block access when signing in from an unexpected IP address range In some cases, you need to be on your corporate network or use your corporate or institution's VPN.

Tip: Contact the User that Granted You Access

In most file/package or folder sharing scenarios, a registered user shares a single file or a shared folder (or message and attachment) managed by MOVEit Transfer with a temporary user or guest user.

If your user is a guest or temporary user, and your account expired, or you reached your file download limit, you can contact the user that provided your initial access to request new or renewed access. You can do this by contacting the user or administrator that granted you initial access (typically, done through email) to the MOVEit Transfer organization that manages the file, package (attachment), or folder.

Who Can Restore My Access?

In general, if a specific user granted you package, file, or shared folder access, or if they sent you an invitation that requested a file or folder upload from you, then that user (either an organization's admin user or a regular user) can extend or re-initiate your folder or file or package access.
Note: If you are a regular user with folder sharing permissions and you shared a folder with a temp user and their account access expired, you can unlock the account from the Shared Folder Access List.

Why is There a Common Access Denied Message?

To prevent giving up clues about our users, a generic message displays when a sign-on attempt fails. This generic message is intentional and prevents a type of exploit by unauthorized users sometimes referred to as "username harvesting."

Common Reasons Access is Denied (and workaround tips)

In general, if a user shares a file/folder/package with you that you cannot access, you can use the guidelines listed in this table to ensure that you are accessing the shared item within the expected constraints expected by the system.

Table 1. Workarounds for common reasons user access can be denied
# Reason for blocked access Workaround/tip
1 Temporary access expired. (User access is often time-restricted or can be conditional, based on a download limit.) Ask the sender (individual that sent you the access) to extend your access (you typically receive an access granted, package email, or shared folder or shared file email) that enables your account to be available for a certain number of downloads or a specific time period.
2 Account suspended (for too many bad sign-on attempts, password aging, or manual administrator action) Notify the individual that sent you the "access granted" notification (you typically receive an access granted, package access, or file shared email) and ask them to unlock your account (or have them notify the local org admin to unlock it).
3 Client certificate not provided when one is required, or a bad client certificate has been provided If you have a smart card issued by your institution or business, use it from your local client machine or client device. If you are using a new desktop, laptop, or mobile device that your company has not registered with a certificate, ask you local IT department to help you install it.
4 Account not allowed to sign on from a specific IP address. Try signing on from your company's Virtual Private Network (VPN). Some sites require you to access MOVEit Transfer from a known range of expected IP addresses.
5 IP address your client application is connecting from is blocked by MOVEit Transfer (for too many bad sign-on attempts, often with different usernames). If you sign in from your corporate or institution's VPN, you might be able to workaround this issue. Otherwise, if you are connecting from a secure and safe network, and you are still blocked, contact the MOVEit Transfer user or administrator that first granted you access (typically, access is granted by email).
6 Username incorrect

Check the access notification mail you received from the MOVEit Transfer site administrator you are trying to access. For guest (package users) or temporary users, your username might be your email address.
7 Password incorrect If you were prompted to answer security questions the first time you signed on to your account, and there is a Forgot Password link on the sign-on page, you can be prompted to answer these security questions to reset your password. Otherwise, you can contact your local MOVEit Transfer administrator, or if that does not work, try to contact the user or administrator who provided you initial access to the site you are trying to access.