Exchange Server
A family of Microsoft client/server messaging and collaboration software.
1,348 questions
Outlook Mobile not accepting Exchange On-Prem credentials if UPN is not equal to mail address (since March 2024)
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(246.4, 99%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAS%3C/text%3E%3C/svg%3E)
A Ska
241
Reputation points
Dears
Since March 2024 (it seems after the 1st half), if an users changes his password in an Hybrid Exchange envirnoment AND his UPN is no hydentical to this email address (example: UPN=john@adatum.local, Email=john@adatum.com), Outlook Mobile does not accept credentials (error during authentication).
The issue is solved only after UPN alignment
Is anyone experiencing this issue?
Any solution apart from the one above?
Thanks
{count} vote
-
Andy David - MVP 149.5K Reputation points MVP2024-04-03T14:31:40.87+00:00 john@adatum.local should have never worked I wouldnt think. its not a internet routable domain suffix.
-
A Ska 241 Reputation points
2024-04-03T15:19:02.0566667+00:00 Correct, we use to keep @adatum.local UPNs for accounts that do not use cloud services like teams or similar
These users only have an on-prem email that must be accessed from outlook mobile; untile March no issues but now after password change, if UPN is ...local there's no way to let Outlook MObile works; other apps have no issues.
-
Jayce Yang-MSFT 1,486 Reputation points Microsoft Vendor2024-04-04T06:33:35.6533333+00:00 This is a known issue which is impacting login where domain name is different than the domain in email address. Microsoft have been working on this.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(268.8, 70%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
Siarhei Maltsau 0 Reputation points2024-05-10T07:07:28.91+00:00 Is there some estimation when it can be fixed?
-
Miguel Gonçalves 961 Reputation points2024-06-10T23:51:05.5466667+00:00 Hi A Ska,
If you have SSO with hybrid Authentication you can still have integration in the identity.
You need to have modern authentication, with outlook clients supported and some considerations if you implement MFA meanwhile.Do you have hybrid identity?
Version of Outlook?
MFA in login?Entra ID have a great logs to understand login issues.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(291.2, 52%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJS%3C/text%3E%3C/svg%3E)
Jan Slavík 0 Reputation points2024-10-22T14:24:48.0533333+00:00 Last 14 days it is almost unreal to add account. Sometimes it works after some time (24h). Devices are managed via intune.
Sign in to comment
Sign in to answer