What people keep running into with identity management
Complaints tagged identity management, each raised by more than one person. One-off posts are not included.
16 recurring problems · 95 people · 11 forums we read
Raised more than once
Most people first.
- 16Why do Microsoft software updates and account errors break everything?Frequent, unannounced interface changes and forced cloud integrations turn routine admin tasks into hours of troubleshooting. Mysterious API errors and hidden account conflicts prevent you from finishing basic fixes, leaving you helpless when the underlying service itself is down.
- 9Why do platform integrations fail without errors?APIs and webhooks can return 200 status codes or empty responses while quietly dropping data without throwing an error. Issues like wrong IDs, bad offset formats, or broken downstream mappings make everything look completely fine from the outside while tasks go missing. This leaves developers unable to catch bugs because there is no complaint, only missing work.
- 8Contractors asking for admin access but not knowing basic ITUnqualified contractors frequently request full administrative control over infrastructure while failing to understand basic IT tools like firewalls, virtualization, or web servers. This leaves companies vulnerable because these contractors do not know how their requested changes will impact production systems.
- 8Migrating a child Active Directory into a parent domainUsers need to keep their child domain logins while accessing parent systems, but split email environments break directory visibility. Because Exchange Online does not know about them, remote mailboxes cannot see on-prem contacts. This stops administrators from recreating distribution groups in the cloud, since on-prem users still need to email those groups.
- 7How to set up MFA backup methods so you don't get locked outLosing a primary mobile device often locks people out of their accounts because they have no configured backup authentication method or bypass option. Without a pre-established alternative, individuals are forced to file tedious IT support tickets just to re-establish access on a new device.
- 7Do mandatory passkeys bypass traditional two-factor authentication?Mandatory passkeys can completely bypass traditional two-factor authentication with a single button click if a computer is left unlocked. This leaves systems vulnerable to internal actors and agents that can inflict damage regardless of scoped access or marketing claims about sandboxing.
- 7Locked out of cloud service partner center after deauthorizationSmall business owners and IT admins are suddenly receiving deauthorization notices for their cloud service provider resellers, locking them out of managing client tenants. This unexpected shutdown cuts off administrative control, leaving organizations scrambling without vendor support or incident response.
- 6Unified tool for zero-touch provisioning and IT asset managementMost endpoint management solutions handle either device deployment or IT asset tracking separately, forcing teams to stitch together multiple tools. This fragmentation prevents sysadmins from managing multi-platform hardware lifecycle workflows in a single pane of glass.
- 5Why are basic security features locked behind expensive tiers?Essential protections like conditional access and geo-blocking are restricted to premium licensing tiers rather than being included in standard packages. This forces organizations to pay extra for fundamental safeguards or accept lower security baselines, making it difficult to implement basic location-based policies for clients without expensive upgrades.
- 5How to catch all account dependencies during user offboardingStandard offboarding catches email and licenses, but misses hidden dependencies like Power Apps, custom flows, and SharePoint ownership tied to the departing account. This leaves administrators manually digging through every admin center to prevent broken workflows and orphaned assets.
- 5Fixing security token enrollment errors for non-technical usersAsking standard employees to manually navigate certificate tools, templates, and provisioning slots turns simple token setups into 30-minute helpdesk calls. Additionally, strict configurations cause sign-ins to fail with error messages stating that the passkey does not meet the criteria set by the admin.
- 4Why does platform single sign on keep breaking?Platform single sign-on intermittently breaks after a few weeks or months, forcing devices to completely drop out of directory membership. This sudden failure blocks access and requires users to either wait weeks, manually wipe the machine, or completely rejoin the system from scratch.
- 2How to secure vendor emails on personal devices without MDMOrganizations often need to give external contractors and vendors access to company alerts and browser-based apps on their own personal computers or phones. Because these workers are scattered globally and use bring-your-own-device setups, companies want to avoid invasive MDM enrollment or complicated user exceptions while still protecting corporate data.
- 2Why won't my seller account update my email address?Platforms often fail to process email changes due to technical errors or account mapping restrictions, frequently reverting the change or displaying failure messages. This prevents sellers from updating crucial account details like name changes, often forcing them to abandon the attempt or risk breaking their account history.
- 2Gotchas when migrating user files to OneDriveStandard migration tools often skip orphan files and local computer directories, forcing sysadmins to run time-consuming scripts across thousands of users to move the remaining data. Once migrated, traditional recovery workflows break because admins can no longer rely on file server backups like Veeam to restore overwritten files. It also remains unclear whether the cloud client forces users to re-authenticate automatically when their domain password changes.
- 2How to handle SSO and device management for local AD and M365?Hybrid environments combining local Active Directory, Microsoft 365, and remote VPNs lack a unified way to handle credentials across separate domains. This disconnect prevents cloud-identity users from signing in to local machines and breaks centralized device management.
Comes up alongside
Topics that keep appearing on the same problems — not topics with similar names.