Tech News

Microsoft 365 Authentication Issues Disrupt User Access Across Multiple Regions

Microsoft 365 users across Asia Pacific, Europe, the Middle East, and Africa are experiencing significant authentication disruptions that are preventing administrators from adding multifactor authentication (MFA) sign-in methods to user accounts.

The service degradation, which began affecting users on Friday, June 13, 2025, has highlighted the critical dependency on Microsoft’s authentication infrastructure for millions of global users.

The authentication issues are specifically impacting administrators who are unable to configure MFA sign-in methods for their users, effectively blocking new security implementations across affected organizations.

Users attempting to access Microsoft 365 services may encounter error messages such as “we’re sorry, we ran into a problem” or “no methods available” when trying to set up MFA authentication.

Microsoft confirmed at 9:20 AM on June 13, 2025, that the disruption stems from a recent change designed to improve MFA sign-in functionality, which has inadvertently caused widespread service degradation.

The company has developed and validated a temporary configuration update to mitigate the immediate impact on end users while engineers work on a comprehensive long-term solution.

Root Cause of the Issue

According to Microsoft’s incident response team, the authentication failures are directly linked to infrastructure changes made to enhance MFA functionality.

The company identified that some authentication processing infrastructure is not performing within expected operational thresholds, prompting immediate configuration adjustments to restore service stability.

This latest incident adds to a series of authentication-related disruptions that have affected Microsoft 365 services throughout 2025. In January, similar MFA outages prevented users from accessing Office applications, with Microsoft attributing those issues to unexpected CPU resource usage spikes that rendered the authentication infrastructure unresponsive.

The current service disruption is geographically concentrated, affecting users located on or served through Microsoft’s infrastructure in the Asia Pacific, Europe, Middle East, and Africa regions.

Healthcare organizations, including NHS England users, have reported specific difficulties with MFA setup on NHS accounts, demonstrating the widespread impact across critical service sectors.

Microsoft’s telemetry data indicates that the configuration changes implemented to address the issue are showing positive results, with service availability gradually improving across affected regions.

The company’s engineering teams are continuously monitoring authentication request patterns to ensure the temporary mitigation measures remain effective.

Microsoft has committed to providing regular updates on the incident resolution progress, with the next scheduled communication expected by Friday, June 13, 2025, at 1:00 PM UTC.

The company’s incident response follows established protocols for major service disruptions, including real-time monitoring and staged rollout of fixes to prevent additional service degradation.

Organizations affected by the authentication issues are advised to monitor Microsoft’s service health dashboard for real-time updates and consider implementing temporary access passes for users who require immediate access to Microsoft 365 services.

The incident underscores the importance of maintaining alternative authentication methods and contingency planning for critical business operations that depend on cloud-based authentication services.

Automate threat response with ANY.RUN’s TI Feeds—Enrich alerts and block malicious IPs across all endpoints -> Request full access

Guru Baran

Gurubaran KS is a cybersecurity analyst, and Journalist with a strong focus on emerging threats and digital defense strategies. He is the Co-Founder and Editor-in-Chief of Cyber Security News, where he leads editorial coverage on global cybersecurity developments.

Recent Posts

Hackers Target AI Infrastructure With RCE, Prompt Injection and API Key Theft

Hackers are actively probing AI systems, turning exposed gateways and agent tools into routes for…

4 hours ago

Hackers Make Phishing Pages Change Their Code Every Time Someone Opens Them

Hackers are making some phishing pages harder to track by changing the code delivered to…

4 hours ago

Iran-Linked Hackers Reportedly Knock UK Power Plant Offline for Four Days

A cyber incident reportedly forced a British power plant to halt operations for about four…

5 hours ago

Russian Hackers Use New HOOKEDGE Malware to Spy on European Defense and Diplomatic Targets

Russian hackers have used a new backdoor called HOOKEDGE to target defense manufacturers, government bodies,…

6 hours ago

Ransomware Gang Claims AI Can Analyze 700GB of Stolen Data Every Hour

TITAN ransomware is pairing file encryption with an ambitious claim: artificial intelligence that can sort…

6 hours ago

Hackers Compromise Hundreds of WordPress Sites to Deploy Amatera Stealer via ClickFix

A fake student resume is being used to place a remote-access tool on researchers’ Windows…

7 hours ago