Supplierweb portal says it is locked

Question

I just tried to log into SupplierWeb and received the notification "Account is locked." I also got this message:

Request Id: [Moderator's note: PII removed]

Correlation Id: [Moderator's note: PII removed]

Timestamp: 2026-07-17T18:25:15Z

Message: AADSTS900561: The endpoint only accepts POST requests. Received a GET request.

How can I get my SupplierWeb account unlocked?

Answer 1

I don't understand this response - I'm using Outlook, which is a native app, not browser-related. I can't log into it, though; I get the error message "An unknown error has occurred. The error code is 0x0"

How can I log in to Outlook?"

Answer 2

Dear @Stu Richards,

Based on the issue message:“AADSTS900561: The endpoint only accepts POST requests. Received a GET request.” This issue usually occurs when the authentication request is being sent using an incorrect HTTP method. Microsoft Entra ID requires POST requests to process authentication tokens and sensitive sign-in information, but in this case, it received a GET request instead. One common reason this can happen is that the browser is blocking third-party cookies, which are often required for the Microsoft sign-in flow to complete successfully. Outdated browser cache/cookies or certain browser extensions may also interfere with the authentication process.

Please try the following steps:

1> Enable third-party cookies

If you are using Google Chrome:

• Open Settings > Privacy and security > Third-party cookies > Allow third-party cookies

If you are using Microsoft Edge:

• Open Settings > Privacy, search, and services > Cookies > turn off Block third-party cookies.

If you are using a different browser, please let me know which one so I can provide the appropriate steps.

2> Clear browser cache and cookies

Please clear your browser’s cached data and cookies, then try signing in again. You may also test the sign-in process using InPrivate or Incognito mode to check whether the issue is related to stored browser data.

3> Add Microsoft sign-in URLs to Trusted Sites

You can also try adding the Microsoft sign-in endpoint to your Trusted Sites:

Open Internet Options > Security tab > Trusted sites.

Add the your needed URL.

4> Try another browser or device

If the issue continues, please test with another browser or device. This can help confirm whether the problem is browser-specific.

I hope the information shared helps point you in the right direction. Please try the steps above and let me know if they work. If not, we can continue working together to narrow this down.

The first response may not always resolve the issue right away, but with your help and more details, we can work toward a solution.

As a moderator, I do not have the tools to investigate your specific account directly, as this is a support forum between users. Moderators and collaborators, including external Microsoft employees, may not directly intervene in the functionality of Microsoft products or access internal systems. Our role is limited to providing technical guidance on reported problems, requests, or ideas. However, I will do my best to guide you as clearly as possible.

---

If the answer is helpful, please click "Yes" and kindly upvote it. If you have extra questions about this answer, please click "Comment". 

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 3

If the lock is in SupplierWeb, first verify whether the issue is the portal account or the Microsoft account used to sign in:

1. Try signing in to https://account.microsoft.com.
2. If that Microsoft account is locked, unlock it by signing in there and requesting a security code.
   • Any phone number can be used to receive the code.
   • The phone number does not need to be associated with the account.
   • The phone only needs to receive text messages.
   • A new password may be required after unlock.
3. If the Microsoft account signs in successfully at https://account.microsoft.com, the lock is likely specific to SupplierWeb rather than the Microsoft account itself.

For the AADSTS900561 message, accepted guidance in similar cases is to check the browser sign-in flow:

1. Enable third-party cookies in the browser.
   • In Edge: Settings > Privacy, search, and services > Cookies and turn off Block third-party cookies.
   • In Chrome: Settings > Privacy and security > Third-party cookies and select Allow third-party cookies.
2. Clear browser cache and cookies.
3. Try an InPrivate/Incognito session.
4. Try a different browser or device to confirm whether the issue is browser-specific.

If SupplierWeb still shows Account is locked after the Microsoft account itself can sign in, the accepted guidance for this scenario is that the lock is on the external portal side and needs to be handled by that portal’s support contact or administrator.

---

• Microsoft account has been locked
• AADSTS900561: The endpoint only accepts POST requests. Received a GET request - Microsoft Q&A Frustrating. I'm contacting support. I am signed in using my Microsoft account. Support website asks me to sign in....vide the following error data.
• Account locked Messsage - Microsoft Q&A Dear Team Can you please help me with below issue. Been trying to login to an external company portal that uses Microsoft account to send verification code to login. The login is used to access Portal for product listing (internal). Recently been getting this message " Account has been locked. Contact your support person to unlock it, then try again." Been trying to reach to security team as well but no use since there is no email mentioned.