Decisions experienced a minor incident on May 15, 2024 affecting Decisions for Microsoft 365, lasting 6h 56m. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- investigating May 15, 2024, 01:15 AM UTC
We are currently aware of intermittent log-in issues for some users. We are currently investigating the root cause.
- identified May 15, 2024, 06:29 AM UTC
The issue has been identified and a solution is being rolled out.
- monitoring May 15, 2024, 06:34 AM UTC
A fix has been implemented and we are monitoring the service performance.
- resolved May 15, 2024, 08:11 AM UTC
This incident has been resolved.
- postmortem May 15, 2024, 10:59 AM UTC
## Incident Report - Authentication Failure **Issue Summary** An issue with our API application's authentication mechanism caused failures for some users attempting to authenticate from May 14th, 17:17 UTC to May 15th, 07:25 UTC. The error was due to an update to the authentication token issued by Microsoft Azure AD containing an unrecognized parameter. **Root Cause Analysis** The primary cause was an unrecognized audience ID in the token issued by Azure AD. The new audience ID was not included in the expected configuration, and subsequently lead to a failure in the authentication process. This is a change in Microsoft's token issuance process needs further investigation to identify if it was a temporary error or a staged release. **Resolution** We updated our application's configuration to recognize the new audience ID. This resolved the authentication issue, and the API is now functioning correctly. **Preventive Measures** * Investigate with Microsoft the new Azure AD token changes to understand the introduction of the new audience ID. * Enhance monitoring capabilities to catch similar issues earlier. * Open a support case with Microsoft for advance notice of similar changes.