Changing AD Binding Credentials breaks SingleSignOn (Solved)

[ServerGuy]

I have SingleSignOn working when using one user as the binding credentials. However if i change what user is set in binding credentials, single sign on no longer works. I click OK for the namespace and it returns me to a login page saying at the top invalid logon. So i logon manually using my domain credentials (just username and password, not a fully qualified username) and it lets me in just fine, so it appears that when i change the user in binding credentials it breaks singl sign on. If i switch the user used back to the original one, single sign on work again. Anyone have any ideas as to what could be the difference between these users that i can still login with both however single sign on breaks with the second?

[ServerGuy]

Solved our own problem, apparently the second user needed some additional permissions. We added it to a group that is basically a "User Managers" group that has access to read and write to all users in AD which solved the problem. Before the user only had access to read all users. Not sure what it needs to write as Cognos only reads from AD but that solved the problem.

[Grim]

Would suggest you change the subject of your OP to [SOLVED].