I would like to clarify for the community that in the context of the BPM Widgets for the Smart Business Workspace (SBW) the SBW user is linked to the Metastorm User via email address.
Specifically your SBW username is the email address you provide.
The out-of-the-box authentication script provided with the BPM Widgets for SBW (MFA_eLogin.js) works by comparing you SBW username (via a token system) with the email addresses linked to your Metastorm Username.
Therefore if you find yourself in the position where everything appears to be setup correct but you are getting "Failed to Login" messages from the BPM Widgets then double check there is a matching email address to the SBW username in the eEMailAddress of the eUser table in the Metastorm BPM Repository.