Users can't access SharePoint Online sites via Microsoft Edge

Incident
September 20, 1:38pm ADT

Users can't access SharePoint Online sites via Microsoft Edge

Status: Closed
Start: September 01, 12:30pm ADT
End: September 20, 1:38pm ADT
Duration: 19 days 1 hour 7 minutes
Affected Components:
Update

September 01, 12:30pm ADT

September 01, 12:30pm ADT

Title: Users can't access SharePoint Online sites via Microsoft Edge
User Impact: Users can't access SharePoint Online sites via Microsoft Edge.
More info: Users can access SharePoint Online sites from other browsers and users can temporarily restore access to sites through Microsoft Edge by clearing their cache.
Users see the following error message when they encounter this issue:
"AADSTS900411: The request is not properly formatted. The parameter 'login_hint' is duplicated" Current status: We're investigating a potential issue and checking for impact to your organization. We'll provide an update within 30 minutes. Scope of impact: Impact may occur for any user attempting to access SharePoint Online sites via Microsoft Edge.

Update

September 01, 12:48pm ADT

September 01, 12:48pm ADT

More info: Users can access SharePoint Online sites from other browsers and users can temporarily restore access to sites through Microsoft Edge by clearing their cache.
Users see the following error message when they encounter this issue:
"AADSTS900411: The request is not properly formatted. The parameter 'login_hint' is duplicated" Current status: We're reviewing available diagnostic data, such as recent service changes and Unified Logging Service (ULS) logs, to isolate the source of this problem and identify our troubleshooting actions. Scope of impact: Impact may occur for any user attempting to access SharePoint Online sites via Microsoft Edge. Next update by: Thursday, September 1, 2022, at 5:00 PM UTC

Update

September 01, 1:40pm ADT

September 01, 1:40pm ADT

More info: Users can access SharePoint Online sites from other browsers and users can temporarily restore access to sites through Microsoft Edge by clearing their cache.
Users see the following error message when they encounter this issue:
"AADSTS900411: The request is not properly formatted. The parameter 'login_hint' is duplicated" Current status: We're continuing to assess available diagnostic data, such as recent service changes and Unified Logging Service (ULS) logs, to isolate the source of this problem and identify an optimal solution. Scope of impact: Impact may occur for any user attempting to access SharePoint Online sites via Microsoft Edge. Next update by: Thursday, September 1, 2022, at 7:00 PM UTC

Update

September 01, 3:37pm ADT

September 01, 3:37pm ADT

More info: Users can access SharePoint Online sites from other browsers and users can temporarily restore access to sites through Microsoft Edge by clearing their cache.
Users see the following error message when they encounter this issue:
"AADSTS900411: The request is not properly formatted. The parameter 'login_hint' is duplicated" Current status: Due to the complexity of this issue, our review of recent service changes has been inconclusive so far. We're continuing our extensive review of available diagnostic data, such as Unified Logging Service (ULS) logs and Evolved Security Token Service (ESTS) logs to isolate the source of this problem. Scope of impact: Impact may occur for any user attempting to access SharePoint Online sites via Microsoft Edge. Next update by: Thursday, September 1, 2022, at 9:00 PM UTC

Update

September 01, 6:03pm ADT

September 01, 6:03pm ADT

More info: Users can access SharePoint Online sites from other browsers and users can temporarily restore access to sites through Microsoft Edge by clearing their cache.
Users see the following error message when they encounter this issue:
"AADSTS900411: The request is not properly formatted. The parameter 'login_hint' is duplicated" Current status: We've identified that a recent change in Microsoft Edge build 104.0.1293.70 caused a feature issue within the Edge browser’s ability to allow users to automatically sign into sites with a current work or school account, which is causing the browser to send multiple login hints when users attempt to sign into SharePoint Online sites. This is occurring only for users operating Edge stable build version 104.0.1293.70 on devices with multiple registered Azure Active Directory (Azure AD) accounts, and users in this condition will be shown an error message stating that the login hint is duplicated. Additionally, we've identified that the fix for this problem will be included in the upcoming release for Microsoft Edge build 105.0.1343.23, and we'll provide a remediation timeline once available. Scope of impact: Impact may occur for any user attempting to access SharePoint Online sites via Microsoft Edge build 104.0.1293.70. Start time: Thursday, August 4, 2022, at 12:00 AM UTC Root cause: A recent change in Microsoft Edge build 104.0.1293.70 caused a feature issue within the Edge browser’s ability to allow users to automatically sign into sites with a current work or school account, which is causing the browser to send multiple login hints when users attempt to sign into SharePoint Online sites. Next update by: Friday, September 2, 2022, at 6:30 PM UTC

Update

September 02, 3:52pm ADT

September 02, 3:52pm ADT

More info: As a workaround, users can go to: edge://settings/profiles/multiProfileSettings and turn off the following feature: "Automatically sign in to sites with your current work or school account?"
Please note that turning off the feature will stop disambiguation but not stop Single Sign On (SSO).
Users can access SharePoint Online sites from other browsers and users could temporarily restore access to sites through Microsoft Edge by clearing their cache.
Users see the following error message when they encountered this issue:
"AADSTS900411: The request is not properly formatted. The parameter 'login_hint' is duplicated"
Current status: Upon further investigation, we’ve determined that a Microsoft Edge browser client feature that streamlines Azure AD SSO for users with multiple Azure AD accounts on one machine utilizes the URL property “login_hint” to disambiguate between accounts during the authentication process. We found an interaction that occurred between SharePoint Online sites and the Edge client browsers running builds 102-104 in which this property is escaped to “login5%hint” and the Edge clients don't correctly identify this as the required property, inserting a duplicate, non-escaped version when authenticating to these sites. Both versions of the property were then recognized and the user would be shown a duplicate property error which prevented them from accessing SharePoint Online sites. We’ve successfully deployed an updated version of Microsoft Edge that includes the fix to address this issue. Affected users need to be on version 105 of Microsoft Edge to experience impact resolution, which may require a manual update. If users are unable to update to the latest version of Microsoft Edge, they need to utilize the proposed workaround until they are able to update the browser and receive the fix. We’re working with affected users to ensure that this issue is no longer occurring after updating their browser, with the expectation that service should be restored.
Scope of impact: Impact may occur for any user attempting to access SharePoint Online sites via Microsoft Edge build 102-104.0.1293.70.
Start time: Wednesday, August 10, 2022, at 1:14 PM UTC
Root cause: A Microsoft Edge browser client feature that streamlines Azure AD SSO for users with multiple Azure AD accounts on one machine utilizes the URL property “login_hint” to disambiguate between accounts during the authentication process. An interaction that occurred between SharePoint Online sites and the Edge client browsers running on builds 102-104 where the property is escaped to “login5%hint” and the Edge clients don't correctly identify this as the required property, inserting a duplicate, non-escaped version when authenticating to these sites.
Next update by: Tuesday, September 6, 2022, at 7:00 PM UTC

Resolved

September 20, 1:38pm ADT

September 20, 1:38pm ADT

Please note that services have been restored. If you continue to experience issues, please contact the Service Desk.