One cause is if a user exceeds the AUTHENTICATE-MAXIMUM-ATTEMPTS configured in Safeguard, the IRSECSRV process can hang for the period configured in Safeguard. This will result in logons timing out until it unfreezes. A workaround is to manually kill the IRSECSRV process, which should be restarted automatically by Prognosis.
Otherwise check the Prognosis error log and open a case with IR Support if need further assistance.
HTH