We've been trying to configure our LF Forms to use Laserfiche Directory Server for SSO (STS) but are running into the following error when saving/enabling the settings:

Cannot find the specified username in the Laserfiche Directory Server site. Please check that the username is in the Directory Server and is a member of a group allowed to sign in to Forms. Also, verify that your Forms server has a valid license file and is registered properly in Laserfiche Directory Server. Finally, ensure that Forms is authorized to view users from all appropriate organizations. [LFF3007-InvalidLFDSCredential]

We're running Forms v11 and have STS set up on the same server where it resides (separate from the Directory Server), thus within Forms config, the Directory Server STS URL is pointing to itself, e.g. https://forms-server/lfdssts.  On this server, we've ran EndpointUtility.exe contained within Forms\Bin and entered both the FQDN (forms-server itself again) and service user's principal name.

Within Forms Config, in addition to the Forms and STS URL, we've entered the Licensing Site info and added a group that has access to Forms.  Under Laserfiche Forms System Administrator, we entered the username of one of the individuals that's part of the aforementioned group.  When trying to save and enable this Laserfiche Directory Server authentication, we get the above error.

It doesn't seem to matter if the Active Directory domain controller is specified or not, and we've tired different ways of entering the user as the System Administrator (e.g. full name, domain\username), but always end up with the same error message.  Thus we cannot move forward and switch Forms to using STS.

Did we miss a step somewhere or make a mistake with some of the configuration?  Any insight or suggestions would be appreciated!