YawaraY.09418 (Customer) asked a question.
User accounts have been locked out due to the rich client authentication error occurred on Microsoft 365 SSO app.
Hi
Some users of our company environment are facing the account lock due to the failure of authentication into Microsoft 365.
All errors occuring are the rich client authentication error.
But nothing of knowledges published in Okta community as follows does not apply in our case.
According the following case, Brute force attack can be suspected but our security team has not detected any suspicious activities.
Anyone facing the similar troubles?
Hi! I too have ran into this issue many times, and have found this article to be most helpful:
https://support.okta.com/help/s/article/Users-getting-locked-out-with-multiple-failed-login-attempts-via-a-Rich-Client?language=en_US
Ultimately what may be happening is that the Microsoft/Outlook credentials are repeatedly trying to authenticate to Okta and thus can lock the user out. Please inquire as to all the devices that could be the culprit here, including their own personal devices as well. Clearing out the credentials are only effective when it is cleared on all the devices, often of which, leading to the one device being left out (and unknown) as the one being the problem.
I hope that helps! Please let me know if you have any further questions or concerns. Thanks!