Managed Apple IDs - Verification Failed

[StephenPink]

Hi,

 

We're a 1:1 iPad school, around 2000 devices and all using Managed Apple IDs - federated with Azure. About a week or so ago, started getting some weirdness with our Managed Apple IDs - in that a lot of users are getting constantly prompted to re-sign in to their Apple ID, but when they put the password in it doesn't accept it, just says "Verification Failed". Have checked everything in Apple School Manager/Azure AD and it all looks correct - and is working fine for the majority of users.

The reason this is such an issue, is because if they can't sign back in, they can't access their iCloud Drive which is where their GarageBand files are stored.

 

So far, the only workaround we've found is to sign them out of their Managed Apple ID on their device, sign them into it on one of our spares (which works) and then they can generally sign back in on their own device. Which is a massive PITA and takes forever! Not really found anything else online about this, so a bit stumped as to what else to check!

 

Anyone else got the same issue/have any ideas?

 

Cheers,

Stephen

[atcoates]

Are there any differences in the connectivity of their devices and yours? Different filtering, IP range etc?

[StephenPink]

Nope - have tried to sign in whilst on 4G, to rule out firewall/filtering but still the same error. Nothing seems to be wrong with the accounts either, as they can sign in on other devices/browsers. Proper weird!

[Brimstone]

Hi,

 

We're a 1:1 iPad school, around 2000 devices and all using Managed Apple IDs - federated with Azure. About a week or so ago, started getting some weirdness with our Managed Apple IDs - in that a lot of users are getting constantly prompted to re-sign in to their Apple ID, but when they put the password in it doesn't accept it, just says "Verification Failed". Have checked everything in Apple School Manager/Azure AD and it all looks correct - and is working fine for the majority of users.

The reason this is such an issue, is because if they can't sign back in, they can't access their iCloud Drive which is where their GarageBand files are stored.

 

So far, the only workaround we've found is to sign them out of their Managed Apple ID on their device, sign them into it on one of our spares (which works) and then they can generally sign back in on their own device. Which is a massive PITA and takes forever! Not really found anything else online about this, so a bit stumped as to what else to check!

 

Anyone else got the same issue/have any ideas?

 

Cheers,

Stephen

What other MS apps e.g. Office365 do the students use to sign in using this Managed Apple ID?

 

Have checked with ASM if there are any domain conflicts or errors?

Edited March 10, 2020 by Brimstone

[RLR]

Hi,

 

We're a 1:1 iPad school, around 2000 devices and all using Managed Apple IDs - federated with Azure. About a week or so ago, started getting some weirdness with our Managed Apple IDs - in that a lot of users are getting constantly prompted to re-sign in to their Apple ID, but when they put the password in it doesn't accept it, just says "Verification Failed". Have checked everything in Apple School Manager/Azure AD and it all looks correct - and is working fine for the majority of users.

The reason this is such an issue, is because if they can't sign back in, they can't access their iCloud Drive which is where their GarageBand files are stored.

 

So far, the only workaround we've found is to sign them out of their Managed Apple ID on their device, sign them into it on one of our spares (which works) and then they can generally sign back in on their own device. Which is a massive PITA and takes forever! Not really found anything else online about this, so a bit stumped as to what else to check!

 

Anyone else got the same issue/have any ideas?

 

Cheers,

Stephen

 

We're not seeing this issue but we're not using federated login so might be something to do with that? Might be a mix of federated logins + updating the iPads?

 

We recently updated our shared mode iPads and had a few issues with students logging in.

[StephenPink]

Yeah I'm struggling to find anyone else with Managed Apple IDs + Federated! The problem appears to be spreading as well which is not ideal. So far still got no clue where to even start looking...

No errors or warnings in ASM/Azure. Hasn't been an iOS update for a little while, so don't think it's related to that, but you never know! Have had devices on 13.3.1 for a while with no issues, so not sure what could have triggered it.

 

Cheers,

Stephen

[RLR]

try asking /r/k12sysadmin

 

A lot of American schools should be using federated logins with 1:1 iPads.

[Brimstone]

Yeah I'm struggling to find anyone else with Managed Apple IDs + Federated! The problem appears to be spreading as well which is not ideal. So far still got no clue where to even start looking...

No errors or warnings in ASM/Azure. Hasn't been an iOS update for a little while, so don't think it's related to that, but you never know! Have had devices on 13.3.1 for a while with no issues, so not sure what could have triggered it.

 

Cheers,

Stephen

I've got 2 trusts using them across every student and teacher nearly - 4,000 Azure Federated managed Apple ID's, I would give Apple support a call but before you do that,,,

 

1) Is this a new Managed Apple ID or an existing one ? why would a student sign out of a Managed Apple ID in the first place? are they also using a Personal ID to get access to store apps?

2) Are they signed into any other devices e.g. iPhone or MacBook with a Managed Apple ID?

3) Have you had any domain errors appear in the logs in ASM?

4) Was format are the Managed Apple ID? Best practice is to use @appleid.school.sch.uk so as not to confuse with other email accounts.

[StephenPink]

I've got 2 trusts using them across every student and teacher nearly - 4,000 Azure Federated managed Apple ID's, I would give Apple support a call but before you do that,,,

 

1) Is this a new Managed Apple ID or an existing one ? why would a student sign out of a Managed Apple ID in the first place? are they also using a Personal ID to get access to store apps?

2) Are they signed into any other devices e.g. iPhone or MacBook with a Managed Apple ID?

3) Have you had any domain errors appear in the logs in ASM?

4) Was format are the Managed Apple ID? Best practice is to use @appleid.school.sch.uk so as not to confuse with other email accounts.

 

Yeah we have opened a case with Apple, it's just incredibly painful and slow!

 

1) Existing Managed Apple IDs, they're not signing out - just being prompted to "Update Apple ID Settings" and it asks them to re-sign in. At which point the Azure login box doesn't appear, and it says "Verification failed".

 

2) No, generally they are only on the single iPad.

 

3) Nope, no errors!

 

4) The format is @normalschooldomain.com - for the federation to work...so it's the same as their normal school email address, in order to make it easier for the students to remember.

 

Thanks,

Stephen

[Driftingashore]

I'm dragging this thread from the dead, but did you ever get to the bottom of what was causing this @StephenPink?

 

We have federated Apple IDs and I'm just testing setting up some Shared iPads, and in testing users can log in fine once, but the second time they log in or return to a paused session.. there's a "verification failed" popup. It's very rare that I can even manage to prompt a login screen from that point - it's mostly a warning in settings and a button that flashes up an overlay that immediately vanishes again. Our one-to-one iPads don't seem to have any issues at all. 

 

Obviously a lot has changed in five years, but something's clearly amis and much like you, I can't seem to see a lot of info out there go give me a something to go on, so I'm hoping you're still around and can remember something to point me in the right direction!