Read Time:10 Minute, 39 Second

Microsoft が提供する Microsoft 365 のサービス正常性（SP424193）にて、Microsoft Edge で SharePoint Online のサイトのアクセスが行えない SI（サービスインシデント）が発生していました。

この問題は、ユーザーが “edge://settings/profiles/multiProfileSettings” にアクセスして、”現在の職場または学校アカウントでサイトに自動的にサインインしますか？” の機能をオフに設定することで回避できる事象になります。

上記機能をオフにすることで回避が行えますが、SSO（シングルサインオン）は停止しない動作となります。

また、他のブラウザーから SharePoint Online にアクセスしたり、Microsoft Edge のキャッシュの削除を行うことで、サイトへのアクセスを一時的に改善することができます。

なお、本事象が発生すると以下のエラーメッセージが表示されます。

“AADSTS900411: The request is not properly formatted. The parameter ‘login_hint’ is duplicated”

現在は、修正プログラムの展開が完了し、本事象が発生していたユーザーの URL のプロパティも機能するようになり、影響が改善されたことを確認しています。

この問題は、1 台のデバイスに複数の Azure Active Directory アカウントを持つユーザーの Azure Active Directory SSO（シングルサインオン）を効率化する Microsoft Edge の機能で認証プロセス中にアカウント間の不整合が解消するために URL プロパティ “login_hint” が使用されています。

この機能が、Microsoft Edge のビルド 102 – 104.0.1293.70 と SharePoint Online のサイト間で、”login5%hint” にエスケープされたことで、Micrrosoft Edge 上で必須プロパティとして正しく認識されず、サイトへの認証時に重複した非エスケープバージョンが挿入されるという相互減少により発生していました。

今後は、同様の影響が発生しないように SharePoint Online のサービスを強化するため、Microsoft Edge との連携に関する SharePoint Online のコードベースを見直す予定です。

この問題は、Microsoft Edge のビルド 102 – 104.0.1293.70 を利用して、SharePoint Online のサイトにアクセスしようとしたユーザーに影響が発生した可能性がある問題になります。

・Title : Users can’t access SharePoint Online sites via Microsoft Edge
・User Impact : Users can’t access SharePoint Online sites via Microsoft Edge.
・More info : Users can access SharePoint Online sites from other browsers and users can temporarily restore access to sites through Microsoft Edge by clearing their cache.
Users see the following error message when they encounter this issue :
“AADSTS900411: The request is not properly formatted. The parameter ‘login_hint’ is duplicated”
・Current status : We’ve identified that a recent change in Microsoft Edge build 104.0.1293.70 caused a feature issue within the Edge browser’s ability to allow users to automatically sign into sites with a current work or school account, which is causing the browser to send multiple login hints when users attempt to sign into SharePoint Online sites.
This is occurring only for users operating Edge stable build version 104.0.1293.70 on devices with multiple registered Azure Active Directory (Azure AD) accounts, and users in this condition will be shown an error message stating that the login hint is duplicated.
Additionally, we’ve identified that the fix for this problem will be included in the upcoming release for Microsoft Edge build 105.0.1343.23, and we’ll provide a remediation timeline once available.
・Scope of impact : Impact may occur for any user attempting to access SharePoint Online sites via Microsoft Edge build 104.0.1293.70.
・Start time : Thursday, August 4, 2022, 9:00 AM (12:00 AM UTC)
・Root cause : A recent change in Microsoft Edge build 104.0.1293.70 caused a feature issue within the Edge browser’s ability to allow users to automatically sign into sites with a current work or school account, which is causing the browser to send multiple login hints when users attempt to sign into SharePoint Online sites.
・Next update by : Saturday, September 3, 2022, 3:30 AM (9/2/2022, 6:30 PM UTC)

Title : Users can’t access SharePoint Online sites via Microsoft Edge

User Impact : Users couldn’t access SharePoint Online sites via Microsoft Edge.

More info : As a workaround, users could go to: edge://settings/profiles/multiProfileSettings and turn off the following feature: “Automatically sign in to sites with your current work or school account?”

Turning off the feature would stop disambiguation but not stop Single Sign On (SSO).

Users could additionally access SharePoint Online sites from other browsers or could temporarily restore access to sites through Microsoft Edge by clearing their cache.

Users saw the following error message when they encountered this issue :

“AADSTS900411: The request is not properly formatted.
The parameter ‘login_hint’ is duplicated”

Final status : We’ve received confirmation from affected users that the fix has restored the affected URL property to functionality and impact is remediated.

Scope of impact : Impact may have occurred for any user attempting to access SharePoint Online sites via Microsoft Edge build 102-104.0.1293.70.

Start time : Thursday, August 18, 2022, 5:07 AM (8/17/2022, 8:07 PM UTC)
End time : Friday, September 2, 2022, 4:16 AM (9/1/2022, 7:16 PM UTC)

Root cause : A Microsoft Edge browser client feature that streamlines Azure AD SSO for users with multiple Azure AD accounts on one machine utilizes the URL property “login_hint” to disambiguate between accounts during the authentication process.
An interaction occurred between SharePoint Online sites and the Edge client browsers running on builds 102-104 where the property is escaped to “login5%hint” and the Edge clients don’t correctly identify this as the required property, inserting a duplicate, non-escaped version when authenticating to these sites.

Next steps : – We’re reviewing the SharePoint Online codebase as it pertains to Microsoft Edge interactions to reinforce the SharePoint Online service environment against similar impact in the future.

This is the final update for this event.

September 2, 2022 6:03 AM

・Title : Users can’t access SharePoint Online sites via Microsoft Edge
・User Impact : Users can’t access SharePoint Online sites via Microsoft Edge.
・More info : Users can access SharePoint Online sites from other browsers and users can temporarily restore access to sites through Microsoft Edge by clearing their cache.
Users see the following error message when they encounter this issue :
“AADSTS900411: The request is not properly formatted. The parameter ‘login_hint’ is duplicated”
・Current status : We’ve identified that a recent change in Microsoft Edge build 104.0.1293.70 caused a feature issue within the Edge browser’s ability to allow users to automatically sign into sites with a current work or school account, which is causing the browser to send multiple login hints when users attempt to sign into SharePoint Online sites.
This is occurring only for users operating Edge stable build version 104.0.1293.70 on devices with multiple registered Azure Active Directory (Azure AD) accounts, and users in this condition will be shown an error message stating that the login hint is duplicated.
Additionally, we’ve identified that the fix for this problem will be included in the upcoming release for Microsoft Edge build 105.0.1343.23, and we’ll provide a remediation timeline once available.
・Scope of impact : Impact may occur for any user attempting to access SharePoint Online sites via Microsoft Edge build 104.0.1293.70.
・Start time : Thursday, August 4, 2022, 9:00 AM (12:00 AM UTC)
・Root cause : A recent change in Microsoft Edge build 104.0.1293.70 caused a feature issue within the Edge browser’s ability to allow users to automatically sign into sites with a current work or school account, which is causing the browser to send multiple login hints when users attempt to sign into SharePoint Online sites.
・Next update by : Saturday, September 3, 2022, 3:30 AM (9/2/2022, 6:30 PM UTC)

September 2, 2022 3:37 AM

・Title : Users can’t access SharePoint Online sites via Microsoft Edge
・User Impact : Users can’t access SharePoint Online sites via Microsoft Edge.
・More info : Users can access SharePoint Online sites from other browsers and users can temporarily restore access to sites through Microsoft Edge by clearing their cache.
Users see the following error message when they encounter this issue :
“AADSTS900411: The request is not properly formatted. The parameter ‘login_hint’ is duplicated”
・Current status : Due to the complexity of this issue, our review of recent service changes has been inconclusive so far.
We’re continuing our extensive review of available diagnostic data, such as Unified Logging Service (ULS) logs and Evolved Security Token Service (ESTS) logs to isolate the source of this problem.
・Scope of impact : Impact may occur for any user attempting to access SharePoint Online sites via Microsoft Edge.
・Next update by : Friday, September 2, 2022, 6:00 AM (9/1/2022, 9:00 PM UTC)

September 2, 2022 1:40 AM

・Title : Users can’t access SharePoint Online sites via Microsoft Edge
・User Impact : Users can’t access SharePoint Online sites via Microsoft Edge.
・More info : Users can access SharePoint Online sites from other browsers and users can temporarily restore access to sites through Microsoft Edge by clearing their cache.
Users see the following error message when they encounter this issue :
“AADSTS900411: The request is not properly formatted. The parameter ‘login_hint’ is duplicated”
・Current status : We’re continuing to assess available diagnostic data, such as recent service changes and Unified Logging Service (ULS) logs, to isolate the source of this problem and identify an optimal solution.
・Scope of impact : Impact may occur for any user attempting to access SharePoint Online sites via Microsoft Edge.
・Next update by : Friday, September 2, 2022, 4:00 AM (9/1/2022, 7:00 PM UTC)

September 2, 2022 12:48 AM

・Title : Users can’t access SharePoint Online sites via Microsoft Edge
・User Impact : Users can’t access SharePoint Online sites via Microsoft Edge.
・More info : Users can access SharePoint Online sites from other browsers and users can temporarily restore access to sites through Microsoft Edge by clearing their cache.
Users see the following error message when they encounter this issue :
“AADSTS900411: The request is not properly formatted. The parameter ‘login_hint’ is duplicated”
・Current status : We’re reviewing available diagnostic data, such as recent service changes and Unified Logging Service (ULS) logs, to isolate the source of this problem and identify our troubleshooting actions.
・Scope of impact : Impact may occur for any user attempting to access SharePoint Online sites via Microsoft Edge.
・Next update by : Friday, September 2, 2022, 2:00 AM (9/1/2022, 5:00 PM UTC)

September 2, 2022 12:30 AM

・Title : Users can’t access SharePoint Online sites via Microsoft Edge
・User Impact : Users can’t access SharePoint Online sites via Microsoft Edge.
・More info : Users can access SharePoint Online sites from other browsers and users can temporarily restore access to sites through Microsoft Edge by clearing their cache.
Users see the following error message when they encounter this issue :
“AADSTS900411: The request is not properly formatted. The parameter ‘login_hint’ is duplicated”
・Current status : We’re investigating a potential issue and checking for impact to your organization. We’ll provide an update within 30 minutes.
・Scope of impact : Impact may occur for any user attempting to access SharePoint Online sites via Microsoft Edge.

Microsoft Store をチェックするなら、このボタンをタップ