This occurs when a user's Banner (Oracle) account is locked.
One example of this would be a former administrator with a full Banner account returning as an adjunct. Upon their departure, the Banner account would have been locked. When they return but only require access to Banner info via the portal, they will get that message when clicking on any Banner links in the portal.
Solution:
In GSASECR, on the Rules tab for that person, move the primary ID to the secondary ID field. Leave the account locked.
If that person returns as an administrator, the ID must be moved again, back to the primary ID field.