In case of Windows Azure Pack integration with PA, direct login in WAP portal is disabled.
Provider and Customers must login in WAP portal from PA Control Panel.
POA Provider CP > Services > Applications > APS Instances > select 'Windows Azure Pack APS Package' instance > switch to the 'Plans' tab > click 'Admin Portal' link
Customer CP > switch to 'Azure Pack Service' tab > click 'Go to Teant Portal' link
Customers' staff members are also allowed to login in WAP portal if role with 'Own application' privilege is assigned on them. During login POA requests WAP portal to create token which is used for auto-login without password.
Subscription and user creation/deletion is not allowed in WAP portal. WAP subscriptions are created only from POA. Additional WAP users are created on the first login attempt.