IBM Security experienced a critical incident on November 16, 2025 affecting Authentication with Cloud Directory and Authentication with SAML Identity Provider and 1 more component, lasting 18h 13m. The incident has been resolved; the full update timeline is below.
Affected components
Authentication with Cloud DirectoryAuthentication with SAML Identity ProviderAuthentication with IBMid for admin usersUser ID and password authentication from APISingle sign on for SAML applicationsApplication OnboardingCloud Directory Users and Groups managementUser and Group management with API clientSingle sign on for OIDC applicationsAccount Lifecycle
Update timeline
- investigating Nov 16, 2025, 03:29 PM UTC
We are currently investigating alerts in Australia region.
- identified Nov 16, 2025, 03:46 PM UTC
An issue with a local database has been identified. IBM is working to address the issue.
- monitoring Nov 16, 2025, 03:53 PM UTC
Services have been restored. We are continuing work to stabilise the environment.
- identified Nov 16, 2025, 03:58 PM UTC
We are experiencing further issues. Investigating.
- monitoring Nov 16, 2025, 04:30 PM UTC
service has been restored. we will continue to monitor
- resolved Nov 17, 2025, 09:42 AM UTC
Services have been running clean. Resolving the incident