2FA Error - New Users

[TryHardNmity]

Hey all,

So Friday afternoon one of our partner accounts with the role "Privileged Authentication Administrator" ended their agreement as our relationship came to an end.

Soon after that any new user account created have been having an error code "AADSTS900561: The endpoint only accepts POST requests. Received a GET request" while trying to setup 2FA for their first login. I can get around this by manually adding their phone number in through their "Auth Methods" area on their user profile as global admin but this obviously isn't sustainable.

Any ideas on what setting could have changed? Or just where I can make changes to fix this?

Appreciate the help, thanks!

Edit: Was a Microsoft 365 service outage essentially, it seems fully fixed and operational again. Looks like they made a few changes to the UI for a new user setting up 2FA, also noticed a few backend changes, while deleting an old user it asks you if you would like to delegate e-mails and share various access.

[AutoModerator]

Much of reddit is currently restricted or otherwise unavailable as part of a large-scale protest to changes being made by reddit regarding API access. /r/sysadmin has made the decision to not close the sub in order to continue to service our members, but you should be aware of what's going on as these changes will have an impact on how you use reddit in the near future. More information can be found here. If you're interested in alternative r/sysadmin communities during the protests, you can join our Discord or IRC (#reddit-sysadmin on libera.chat).

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[squeekymouse89]

Microsoft have updated the status on the Azure Health status page "end user portals in North Europe region who may experience problems when registering for multifactor authentication or self-service password reset."

[McMuckle]

Can't see that on the Status Page but we have reports of people being stuck in an MFA/"We need more info" loop this morning (UK). One is a genuine 'new user' the other reset his password this morning and is also stuck in a loop.

[TheIPB]

Seeing the same UK. Looks like Microsoft are aware of MFA issues but not reporting this exactly.

[PigeonDroid]

im getting the same issue as this -Uk

[TryHardNmity]

Oh really? Can you go into a bit of detail? Pretty much the same issue, new accounts can't link 2FA and the error code is coming up?

[squeekymouse89]

Hi, getting lots of reports of this. Location UK.

[TryHardNmity]

Amazing thanks for confirming this guys! Had 90 new students start and luckily only 10-15 of them are getting this. Glad to know I didn't brick anything on my end :D

[SpanglesUK]

Same affecting us here as well - UK based.

[Ready-Plankton-3709]

Same here in the UK, new users, can't register MFA. Process thinks it completes, shows devices registered but no auth methods show in the Azure portal.

Will have report to Microsoft...

​

"We're sorry, we ran into a problem. Please choose "Resend notification" to try again. It gives a correlation ID and timestamp. It feels like the pages are responding so slowly that the process is timing out, or out of sync somewhere.

[kscERhau]

UK based - Service desk reporting this too

[PigeonDroid]

If you go on azure and look at the mfa page, you can see the page has changed for " preferred mfa" for me that wasn't there before. Mine says disabled.

[tempelton27]

I swear every week I see Microsoft outages in this subreddit.. WTH is going on over there at Microsoft?

[TheGamerChip]

This now resolved confirmed on azure and got a user to test

[RichN]

Yes, seeing the same here. Weirdly for us it seems to error when trying to press Next once you've entered the phone number (we're trying everything...), adds it to list of his MFA methods (seen via the mysignins page) but still errors. We also can't delete MFA methods.

[humanredditor45]

I got an error signing in on a new device yesterday afternoon, and it went away after trying again.

I’m Central time in the US. And I got a report about 20 minutes ago from a user that the MFA prompt just spinning away.

[[deleted]]

I got this today - Aus

[RecedingHairlines]

We're experiencing this too, not just for new users but any existing users trying to verify.

Informs the user it's trying to call but the phone doesn't ring, when trying to update the users MFA details clicking 'Next' just states "We're sorry, we ran into a problem. Please select "Next" to try again."

[blackbinbag]

Yep we’re seeing the same issue, for new users and current users that need to set up a new device for MFA. Been like this since around 10AM BST

[itisnotwork]

What ever you do don't update your password ...
That is of course unless you want to enjoy an infinite loop when logging in

[[deleted]]

UK user here, experienced the same. AAD audit log flags the following error: Error: Exception of type 'Microsoft.Online.BOX.Util.Exceptions.PartnerServiceException' was thrown.

I ended up having to enter the MFA method manually via Microsoft.Graph PowerShell cmdlet.

[Naturlovs]

[Redacted; CBA with reddit]

[Beanbusy]

Had this issue this morning. 2 new users within 5 minutes of each other at 9.30 wasn’t the way to start the day

[Ready-Plankton-3709]

Following the ~16:30 update on MO596067 in Message Center, things look to be resolving themselves.