[ms office - o365] Office keeps asking to sign in

[newpersn]

(Not just o365 but 2021 as well)

 

Hello

 

Bit of a odd one here.

 

Some users have just started getting the login box asking to be sign in, They enter there login information and it reappears a few seconds later. This appears in must office software?

 

Anyone else had this?

[Oaktech]

Is the account they are signing in to office with the same as they are signing into the PC with, or at least does the email address match?

 

I've seen this before we went fully intune where the user had an on-prem account which still had an old .sch.uk email address attached to it where the account they were signing in to office with was a new .org address and it seemed to be getting it's knickers in a twist over the difference, with it trying to sign in with account attached to windows in preference to the account that had been submitted in office.

[newpersn]

Is the account they are signing in to office with the same as they are signing into the PC with, or at least does the email address match?

 

I've seen this before we went fully intune where the user had an on-prem account which still had an old .sch.uk email address attached to it where the account they were signing in to office with was a new .org address and it seemed to be getting it's knickers in a twist over the difference, with it trying to sign in with account attached to windows in preference to the account that had been submitted in office.

 

Yep all match, Only started doing it towards the end of last week. Can login to Office 365 with the same email address and password and it all works fine - Just Office apps.

[rossibIT]

Interesting....

 

We had a policy that automatically signed the user in to O365 apps but I have seen today users having to sign in.

 

With your issue @newpersn does it show that the user is "logged in" to Office but its not?

 

Regards

Ross

[newpersn]

Interesting....

 

We had a policy that automatically signed the user in to O365 apps but I have seen today users having to sign in.

 

With your issue @newpersn does it show that the user is "logged in" to Office but its not?

 

Regards

Ross

 

Yep Shows them logged in but keep getting this pop up - Enter correct password but gets stuck in a loop for 1 user.

 

[old_n07]

Has their password expired, have seen this with outlook when it has in the past

[Oaktech]

Yep all match, Only started doing it towards the end of last week. Can login to Office 365 with the same email address and password and it all works fine - Just Office apps.

 

Then ignore me, it's not the same issue!

[rheibel]

do you have the latest changes to the microsft URL 'whitelist' for your firewall inplace and recently i have seen our sonicwall firewall block MS edge SSO as it sees the trafic as a match for a socilmedia app. About 1 in every 200 logins seem to get affected so far not always the same app is matched so presume microsoft are using some new obscureing code not a traditional HTTPS URL for login specificly seem to affect Edge which ofcause Office uses for the login. If its the same the same users who get asked in a loop to sign into office will also see the profile selection screen when opening edge.

[newpersn]

Has their password expired, have seen this with outlook when it has in the past

 

Password hasn't expired (Set not to expire on this account although i am thinking about getting them to change password)

 

Someone else keep getting this when they sign in.

 

[newpersn]

do you have the latest changes to the microsft URL 'whitelist' for your firewall inplace and recently i have seen our sonicwall firewall block MS edge SSO as it sees the trafic as a match for a socilmedia app. About 1 in every 200 logins seem to get affected so far not always the same app is matched so presume microsoft are using some new obscureing code not a traditional HTTPS URL for login specificly seem to affect Edge which ofcause Office uses for the login. If its the same the same users who get asked in a loop to sign into office will also see the profile selection screen when opening edge.

 

You got the updated URL's?

 

This is happening at a few schools, 1 on SWGfL and one on Sophos XG.

[NegativeKillDeath]

We see this occasionally, Shared activation and roaming profiles. Deleting the user.dat fixes it.

[rheibel]

here is the link to the updated page to monitor for changes. tipicly the rss feed has helpfull details like "2 urls updated" you then just have to work out which one e.g notepadd++ and compare the list with last one you setup. note some of the *. e.g *.portal.cloudappsecurity.com can be replaces with ones with your tennant ID included in the URL but you need to work out which ones depends how locked down your policies for firewalls are.

https://learn.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide

 

this azure page has others if you have moved some servers to the azure cloud personaly not needed these yet

https://learn.microsoft.com/en-us/azure/app-service/environment/firewall-integration#fqdn-httphttps-dependencies

[tri_94]

Did you get anywhere with this as i have similar with a few users.

 

Thanks