Forum Discussion
Multiple Failed SignIn Events
I've a user for whom within the last week I'm consistently seeing more than 100 failed login events from this authorized device. And these seems to be something running at the back-end as these logs are within 2/3 mins intervals. The error messages goes as "Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access the resource." Also, the application that shows interrupted are:
- - Office Online Maker SSO
- - Office Online Core SSO
- Office365 Shell WCSS-Client
- SharePoint Online Web Client Extensibility->Microsoft Graph
Anyone has any insights into addressing this issue. Thanks
1 Reply
Try this to address and fix your issue:
- Check MFA Configuration: Ensure that the MFA settings are correctly configured for the user and the applications involved. Sometimes, changes in MFA policies can cause issues if not properly set up.
- Review Application Permissions: Verify that the applications (Office Online Maker SSO, Office Online Core SSO, Office365 Shell WCSS-Client, SharePoint Online Web Client Extensibility) have the correct permissions and are not blocked by any security policies.
- Inspect Network Connectivity: Ensure that there are no network connectivity issues between the user's device and the authentication servers. Network interruptions can sometimes cause repeated authentication failures.
- Audit Logs: Look into the detailed logs to see if there are any patterns or additional error messages that might give more insight into why the authentication is failing.
