Microsoft Entra ID Lockouts After MACE App Flags Legit Users

Microsoft Entra ID accounts were locked due to a bug in the MACE Credential Revocation app, which mistakenly flagged legitimate users as high-risk. The issue was caused by an internal logging problem with refresh tokens, leading to invalidated tokens and subsequent alerts. Microsoft has addressed the problem and provided a solution for affected users.