{"id":36981,"date":"2018-11-20T10:46:03","date_gmt":"2018-11-20T10:46:03","guid":{"rendered":"http:\/\/icloud.pe\/blog\/?guid=87d8b0d648b52db261ec4d7ed42f9dc4"},"modified":"2018-11-20T10:46:03","modified_gmt":"2018-11-20T10:46:03","slug":"microsoft-office-365-and-azure-users-locked-out-of-accounts-due-to-mfa-issues","status":"publish","type":"post","link":"https:\/\/icloud.pe\/blog\/microsoft-office-365-and-azure-users-locked-out-of-accounts-due-to-mfa-issues\/","title":{"rendered":"Microsoft Office 365 and Azure users locked out of accounts due to MFA issues"},"content":{"rendered":"<p><span class=\"field field-name-field-author field-type-node-reference field-label-hidden\"><br \/>\n      <span class=\"field-item even\"><a href=\"https:\/\/www.cloudpro.co.uk\/authors\/keumars-afifi-sabet\">Keumars Afifi-Sabet<\/a><\/span><br \/>\n  <\/span><\/p>\n<div class=\"field field-name-field-published-date field-type-datetime field-label-hidden\">\n<div class=\"field-items\">\n<div class=\"field-item even\"><span class=\"date-display-single\">20 Nov, 2018<\/span><\/div>\n<\/p><\/div>\n<\/div>\n<p class=\"short-teaser\">\n<a href=\"https:\/\/www.cloudpro.co.uk\/\" title=\"\" class=\"combined-link\"><\/a><\/p>\n<div class=\"field field-name-body\">\n<p> Azure and Office 365 users were unable to login to their accounts yesterday due to issues with Microsoft\u2019s multi-factor authentication (MFA) service.<\/p>\n<p>From 4.39am on Monday until later that evening users in the UK and Western Europe, as well as pockets around the world, were unable to access their Office 365 accounts.<\/p>\n<p>Azure services such as Azure Active Directory was also closed off to users whose organisations enforced mandatory MFA.<\/p>\n<p>Although Microsoft says its services are now operating as normal, this incident has angered organisations trying to convince their employees of MFA\u2019s benefits, as well as those who have had to contend with similar outages in recent months.<\/p>\n<div class=\"wysiwyg-widget-wrapper\">\n<blockquote class=\"twitter-tweet\" data-lang=\"en\">\n<p lang=\"en\" dir=\"ltr\">Any update would be appreciated. Users are starting to search for their torches and pitchforks.<\/p>\n<p>&mdash; Thomas H. (@Hoelli4C) <a href=\"https:\/\/twitter.com\/Hoelli4C\/status\/1064465812319322112?ref_src=twsrc%5Etfw\">November 19, 2018<\/a><\/p>\n<\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/div>\n<div class=\"wysiwyg-widget-wrapper\">\n<blockquote class=\"twitter-tweet\" data-lang=\"en\">\n<p lang=\"en\" dir=\"ltr\">All our months of convincing our customers to have 2FA turned on has gone out the window on the very day we were turning it on&#8230;.<\/p>\n<p>&mdash; Darren Ashley (@DarrenAshley) <a href=\"https:\/\/twitter.com\/DarrenAshley\/status\/1064551946508541952?ref_src=twsrc%5Etfw\">November 19, 2018<\/a><\/p>\n<\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/div>\n<p>\n<span id=\"docs-internal-guid-24ec8a11-7fff-200c-1a43-f2a6f4d69bd0\">The cause, according to <a href=\"https:\/\/azure.microsoft.com\/en-gb\/status\/\" >Azure\u2019s status history<\/a>, lied with requests from MFA servers, sent to a European-based database, reaching operation threshold, which in turn caused latency and timeouts.<\/span><\/p>\n<p>Attempts to reroute traffic through North America ended in failure, and caused a secondary issue when servers become unhealthy and traffic was throttled to handle increased demand.<\/p>\n<p>&#8220;Engineers deployed a hotfix which eliminated the connection between Azure Identity Multi-Factor Authentication Service and a backend service. Secondly, engineers cycled impacted servers which allowed authentication requests to succeed,&#8221; Microsoft wrote.<\/p>\n<p>&#8220;Engineers will continue to investigate to establish the full root cause and prevent future occurrences.&#8221;<\/p>\n<p>The firm says it will publish a full analysis of the outage within the next couple of days.<\/p>\n<div id=\"file-6821\" class=\"file file-image file-image-jpeg file-content-full-width\">\n<div class=\"content\">\n    <img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/cdn2.cloudpro.co.uk\/sites\/cloudprod7\/files\/styles\/insert_main_wide_image\/public\/2018\/11\/image002.jpg?itok=RqmLa2Zj\" width=\"558\" height=\"377\" alt=\"\" \/>  <\/div>\n<\/div>\n<div id=\"file-6822\" class=\"file file-image file-image-png file-content-full-width\">\n<div class=\"content\">\n    <img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/cdn2.cloudpro.co.uk\/sites\/cloudprod7\/files\/styles\/insert_main_wide_image\/public\/2018\/11\/image003.png?itok=FI-T3U3b\" width=\"562\" height=\"286\" alt=\"\" \/>  <\/div>\n<\/div>\n<p><strong><em>Error messages that users received upon trying to access their Office 365 and Azure accounts<\/em><\/strong><\/p>\n<p>Monday\u2019s issues are the latest in a string of prominent Microsoft Azure and Office 365 outages customers have had to suffer in recent months, with the previous incident occurring just three weeks ago.<\/p>\n<p>The <a href=\"https:\/\/www.cloudpro.co.uk\/it-infrastructure\/7754\/days-long-microsoft-outage-leaving-users-unable-to-login-to-office-365\" >days-long outage, which struck in late October,<\/a> left predominately UK users unable to login to Office 365 due to additional login prompts appearing after user credentials had already been entered.<\/p>\n<p>Another global outage in September affected Azure and Office 365 users across the world after a <a href=\"https:\/\/www.cloudpro.co.uk\/it-infrastructure\/7754\/days-long-microsoft-outage-leaving-users-unable-to-login-to-office-365\" >&#8220;severe weather event&#8221; knocked one of Microsoft\u2019s San Antonio-based servers offline<\/a>.<\/p>\n<p>&#8220;With less than a month between disruptions, incidents like today\u2019s Azure multi-factor authentication issue pose serious productivity risks for those sticking to a software-as-a-service monoculture,\u201d said Mimecast\u2019s cyber resilience expert Pete Banham.<\/p>\n<p>&#8220;With huge operational dependency on the Microsoft environment, no organisation should trust a single cloud supplier without an independent cyber resilience and continuity plan to keep connected and productive during unplanned, and planned, email outages.<\/p>\n<p>&#8220;Every minute of an email outage could costs businesses hundreds and thousands of pounds. Without the ability to securely log in, knowledge worker employees are unable to do their jobs.&#8221;<\/p>\n<p><em>Cloud Pro<\/em> approached Microsoft for comment. <\/p>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"<p>      Keumars Afifi-Sabet<\/p>\n<p>        20 Nov, 2018    <\/p>\n<p>       Azure and Office 365 users were unable to login to their accounts yesterday due to issues with Microsoft\u2019s multi-factor authentication (MFA) service.<br \/>\nFrom 4.39am on Monday until later th&#8230;<\/p>\n","protected":false},"author":433,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-36981","post","type-post","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/posts\/36981","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/users\/433"}],"replies":[{"embeddable":true,"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/comments?post=36981"}],"version-history":[{"count":2,"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/posts\/36981\/revisions"}],"predecessor-version":[{"id":36985,"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/posts\/36981\/revisions\/36985"}],"wp:attachment":[{"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/media?parent=36981"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/categories?post=36981"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/tags?post=36981"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}