AD > AD Cloud Connect is sync'd > users cannot login to cloud apps > invalid password

Question

AD > AD Cloud Connect is sync'd > users cannot login to cloud apps > invalid password

Paiea P. Natto 20

Upgraded/migrated from Azure AD Connect to Azure Cloud Sync. Agent running fine, the portal tells me the Directory Sync fine and Password Sync fine. But when trying to access the cloud apps, users receive error "Your account or password is incorrect". No passwords were changed. I see the app listed in Enterprise Apps section. The cloud sync agent says it is Alive and Healthy, However, no one can login. Please help.

Sandeep G-MSFT 21,116 Reputation points Microsoft Employee Moderator

2023-10-27T11:51:16.7566667+00:00

@Paiea P. Natto

Thank you for posting this in Microsoft Q&A.

I am looking into this issue and will get back to you post my research.
Paiea P. Natto 20 Reputation points

2023-10-27T16:13:43.6766667+00:00

Thanks Sandeep
Paiea P. Natto 20 Reputation points

2023-10-27T16:30:16.63+00:00

I will clarify the environment. We had Azure AD Connect running on a 2012 server and Microsoft ended support for it. The tool suggested we upgrade to the AD Cloud Sync which runs on only 2016, another server. So I installed the Agent on it and it seems to work. Everything is healthy but we still get password errors. I checked the portal again, it says Directory & Password sync is occurring. I'm not getting any error messages except when trying to access outlook.office.com/owa

Are we to STOP the AD Azure Connect services running on the 2012 server? It is still running. When I stop them, when trying to access OWA it yields an error 500 Bad Request. When services are running we get the password error.

Answer accepted by question author

1 additional answer

Your answer

Sandeep G-MSFT 21,116 Reputation points Microsoft Employee Moderator

2023-10-27T11:51:16.7566667+00:00

@Paiea P. Natto

Thank you for posting this in Microsoft Q&A.

I am looking into this issue and will get back to you post my research.
Paiea P. Natto 20 Reputation points

2023-10-27T16:13:43.6766667+00:00

Thanks Sandeep
Paiea P. Natto 20 Reputation points

2023-10-27T16:30:16.63+00:00

I will clarify the environment. We had Azure AD Connect running on a 2012 server and Microsoft ended support for it. The tool suggested we upgrade to the AD Cloud Sync which runs on only 2016, another server. So I installed the Agent on it and it seems to work. Everything is healthy but we still get password errors. I checked the portal again, it says Directory & Password sync is occurring. I'm not getting any error messages except when trying to access outlook.office.com/owa

Are we to STOP the AD Azure Connect services running on the 2012 server? It is still running. When I stop them, when trying to access OWA it yields an error 500 Bad Request. When services are running we get the password error.

Answer 1

@Paiea P. Natto

Sorry for the delayed response. You can follow below article for troubleshooting password hash sync,

https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/tshoot-connect-password-hash-synchronization#no-passwords-are-synchronized-troubleshoot-by-using-the-troubleshooting-task

If this doesn't resolve the issue we can work on this offline.

Please send us an email on azcommunity [at] microsoft [dot] com with Sub - Attn: Sandeg and following details in the email body:

Link to this thread/post

We can connect offline and discuss further on this.

Let me know if you have any further questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

Paiea P. Natto 20

Got it going. Upgraded the host server from 2012 R2 to 2016 then upgraded OS to 2019 and installed the Azure AD Connect v2. Configured everything, then took out of Staging Mode. Password Hashing and Sync all good.

Share via

AD > AD Cloud Connect is sync'd > users cannot login to cloud apps > invalid password

1 additional answer

Your answer