Forum Discussion
Multiple Failed SignIn Events
I've a user for whom within the last week I'm consistently seeing more than 100 failed login events from this authorized device. And these seems to be something running at the back-end as these logs...
Try this to address and fix your issue:
- Check MFA Configuration: Ensure that the MFA settings are correctly configured for the user and the applications involved. Sometimes, changes in MFA policies can cause issues if not properly set up.
- Review Application Permissions: Verify that the applications (Office Online Maker SSO, Office Online Core SSO, Office365 Shell WCSS-Client, SharePoint Online Web Client Extensibility) have the correct permissions and are not blocked by any security policies.
- Inspect Network Connectivity: Ensure that there are no network connectivity issues between the user's device and the authentication servers. Network interruptions can sometimes cause repeated authentication failures.
- Audit Logs: Look into the detailed logs to see if there are any patterns or additional error messages that might give more insight into why the authentication is failing.