It says "This user is not permitted to use the portal"
In web.config, find the
PermittedGroupSID key, and set it to the SID value of a group in your domain. Users in this group will be allowed to log in to the portal, and others will be denied.
Note: Domain Admins are always allowed.