Azure MFA breaks authentication for Outlook and Teams

Question

Azure MFA breaks authentication for Outlook and Teams

Krikke88 6

Hi all,

Today I enabled Azure MFA using Conditional Access for some of our users.
When I enabled Azure MFA, some users couldn't open Outlook or Teams anymore showing a white "Accounts (Not Responding" window.

Some more info about the clients

Windows 10 Enterprise
Hybrid Joined - Co managed
Credential Guard
BitLocker
Defender For Endpoint (passive mode)

Things I tried

Reset the AAD Broker plugin (removed the folder & let it create again) -> did not solve the issue
Removed the device on Azure AD, Did a dsregcmd /leave, forced an AD Connect sync, Ran the workplace join task)

At this point Teams seemed to be back in business, Outlook still wasn't able to authenticate & sign out and sign in again in other office apps (like Word) didn't work either

Outlook was unable to authenticate
Creating a new profile in Outlook failed autodiscover
Outlook didn't show a pop-up for authentication but kept the profile loading.
Tried clearing the Office/16.0/Common/Identities branch on the devices
Tried running the if (-not (Get-AppxPackage Microsoft.AAD.BrokerPlugin)) { Add-AppxPackage -Register "$env:windir\SystemApps\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Appxmanifest.xml" -DisableDevelopmentMode -ForceApplicationShutdown } Get-AppxPackage Microsoft.AAD.BrokerPlugin

command, received the TPM not working, couldn't find key pair.
* A reboot seems to fix the issue

I managed to get things back like they were, but i'm still looking for a root cause to mitigate before rolling out MFA to 2000 users.

Has anyone an idea what could be going wrong? The devices that worked didn't seem to have Credential Guard enabled, but I can't seem to find threads / articles from others experiencing these issues.

Any help is greatly appreciated!

Marilee Turscak-MSFT 37,206 Reputation points Microsoft Employee Moderator

2022-07-29T16:40:10.38+00:00

Hi @Krike88,

There have been some network connectivity issues this week that have caused this and there is an open investigation right now into an issue where users are unable to access Azure resources due to network congestion. https://status.azure.com/en-us/status

I have shared your information with the MFA team though to see if they are aware of this specific issue.
Krikke88 6 Reputation points

2022-07-29T18:28:34.173+00:00

Thank you in advance, Marilee!

We are Europe-West based :-)

The weird part, is that I didn't see any logon failures in Azure AD sign-in logs.
Even though MFA was turned off for the users as soon as troubles came up, the issue didn't get resolved automatically.

When a user took another device (no credential guard) he could work without any issue.

I'm going to pick up the devices on monday so I can further test and validate where things go wrong :-) and post some events from the event viewer.

Best regards,

Kristof

1 answer

Your answer

Marilee Turscak-MSFT 37,206 Reputation points Microsoft Employee Moderator

2022-07-29T16:40:10.38+00:00

Hi @Krike88,

There have been some network connectivity issues this week that have caused this and there is an open investigation right now into an issue where users are unable to access Azure resources due to network congestion. https://status.azure.com/en-us/status

I have shared your information with the MFA team though to see if they are aware of this specific issue.
Krikke88 6 Reputation points

2022-07-29T18:28:34.173+00:00

Thank you in advance, Marilee!

We are Europe-West based :-)

The weird part, is that I didn't see any logon failures in Azure AD sign-in logs.
Even though MFA was turned off for the users as soon as troubles came up, the issue didn't get resolved automatically.

When a user took another device (no credential guard) he could work without any issue.

I'm going to pick up the devices on monday so I can further test and validate where things go wrong :-) and post some events from the event viewer.

Best regards,

Kristof

Answer 1

Marilee Turscak-MSFT 37,206 Microsoft Employee Moderator

Thanks @Krikke88 ,

I gave your information to the product team and they agreed that this may have been related to the network issue from this past week, but without more data it's difficult to say for certain, especially if the issue has resolved itself.

The Azure status history page shows some of the outages over the past week that may give you some insights. https://status.azure.com/en-us/status/history/

If you share the event viewer logs we will definitely have some more clues.

Marilee

Share via

Azure MFA breaks authentication for Outlook and Teams

1 answer

Your answer