CDM cannot be used; downstream authentication to M365 via MS Graph is failing

[kennysarmy]

https://www.iamcloudstatus.com/

 

Currently we're being affected, anyone else?

 

I wonder if any other 3rd party apps are being affected by this MS change?

 

 

[TheRobins]

I am touching every bit of wood I can see 😄

 

Not had one report here yet, It seems if your on an affected MS server your in trouble, I would hope they have stopped the rollout and we just happen to be on infrastructure that is not affected.

 

I feel sorry for them, this recent trend of Microsoft just doing changes without testing or notice is getting progressively worse.

 

In a way, at least you have onedrive web at the least to fall back onto. 

[robknowles]

Hopefully it's not related this change that Microsoft have been warning about for some time.  

 

https://techcommunity.microsoft.com/blog/microsoft-entra-blog/important-update-azure-ad-graph-retirement/4364990

[kennysarmy]

2 minutes ago, robknowles said:

Hopefully it's not related this change that Microsoft have been warning about for some time.  

 

https://techcommunity.microsoft.com/blog/microsoft-entra-blog/important-update-azure-ad-graph-retirement/4364990

 

Imagine....

[TheRobins]

Well number 2 would be quite a shocker, however they have just posted this update.

 

Be interesting to see if Microsoft agree and post an incident about the bug. 

"

Microsoft Product Group have confirmed that this is a Bug. They have confirmed that it remains under active investigation but have yet to provide timescales for a fix (ETA) or documentation (RCA).

Service restoration remains our priority. We are progressing with the development and testing of a fix that can be supplied to impacted customers.

Fix ETA:
Dependent on hotfix completion and successful testing.

"

 

 

 

[thimon]

I’ve just installed the 3.20 version of CDM. Works fine now 🙂

[thimon]

Cancel that. Email from IAMCloud this evening:

 

URGENT - we're very sorry but please hold off mass deploying this version. We have noticed an issue with it and need to provide another build, this will be within the next hour.

 

If you have already mass deployed it, please let me know as we need to add you to a list on our side to contact in the future when 3.21 is out as you'll need to do a custom upgrade path. 
 

If you have it installed on single machine, it will need a full uninstall, then a reinstall once the next update is out. 

 

I'll let you know as soon as its available. 

[thimon]

Latest update:

 

The latest update is - Microsoft have applied a fix for this now, which has been rolled out globally. We've confirmed in our labs that 3.19.2 and below now function as normal. If you still have one of those versions installed, it can be tested to see if it works ok, if it doesn't yet, it will do soon. 

The issue now is that the expedited version of 3.20.0  that we provided, ideally needs to be removed. There was an unexpected problem with it and it means that once 3.21 is released, the normal upgrade path of an in place upgrade, won't work. 
 

The removal process needs to be a complete uninstall, then a re install of 3.19.2 from iris.iamcloud.net

 

However 3.20.0 will still function as normal, so if it can't easily be removed, when the time comes to upgrade to 3.21, we'll need to assist you with a custom upgrade method. 

[kennysarmy]

Yes, I had already left for the day before the 3.20.0 email hit my inbox (thankfully)

 

Looks like it might be a pain if that's been rolled out?