University of Alaska incident

Iru Web Login Outage

Resolved after 23 days 3 hours, affecting Other IT Services, on August 3, 2026.

postmortem Aug 26, 2026, 08:11 PM UTC

IRU Authentication Outage Problem Impact Analysis Event Occurrence: 20260803 # Background The IRU authentication service provides user authentication capabilities for managed macOS devices and web-based access through Kandji Passport. The service relies on integration between Kandji Passport, Microsoft Entra ID, Conditional Access policies, and Duo MFA to provide secure authentication for users. # Break Down of the Problem On August 3, 2026, users experienced authentication issues when attempting to access IRU services. The issue affected users attempting to authenticate through Kandji Passport Web Login and impacted the ability to complete the login process. The issue was investigated through Entra ID sign-in logs, Conditional Access policies, Duo MFA authentication flow, and Kandji Passport authentication services. # Target State / Goal A functional authentication into IRU-managed macOS devices. # Root Cause Analysis ‌ Changes to Microsoft’s Conditional Access methods, effective as of Jun 15, 2026: * [https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-enforcement-resource-exclusions](https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-enforcement-resource-exclusions) * [https://techcommunity.microsoft.com/blog/microsoft-entra-blog/upcoming-conditional-access-change-improved-enforcement-for-policies-with-resour/4488925](https://techcommunity.microsoft.com/blog/microsoft-entra-blog/upcoming-conditional-access-change-improved-enforcement-for-policies-with-resour/4488925) The changes outlined above now require DUO to be set as the default login method on a user’s account in M365. # Develop Countermeasures Immediate countermeasure developed by adding users to Entra group that enabled the newer DUO authentication method. # Implementation of Countermeasures IT staff completed a change that added all users to receive this fix. # Follow Up / Review Regularly review progress of long term solution implementation.

Started
Aug 03, 2026, 04:55 PM UTC
Resolved
Aug 26, 2026, 08:10 PM UTC
Duration
23d 3h
Detected by Pingoru
Aug 03, 2026, 04:55 PM UTC

Affected components

Other IT Services

Update timeline

  1. investigating Aug 03, 2026, 04:55 PM UTC

    We have received reports that the Iru web login option is currently experiencing issues. The NTS Technology Support Services team is currently investigating, and we will be making updates at 3 hour intervals. Switching to local login should allow you to log into your Mac. Thank you for your patience during the resolution of this issue!

  2. investigating Aug 03, 2026, 05:25 PM UTC

    The NTS Technology Support Services (TSS) team is currently investigating the cause of this issue. If unable to log into your UA Mac, they try switching to Local login. To switch to local login: 1. Click the profile icon (the person inside a circle) in the upper-right corner of the screen. 2. Select Switch to Local Login. 3. Enter your University login credentials in the username and password fields that appear near the bottom center of the screen. 4. Click Sign In to log in. If you are still unable to log in, please contact your local IT Help Desk for further assistance. Thank you for your continued patience as we work towards a full resolution; we will make further updates at 3 hour intervals and as new information becomes available.

  3. investigating Aug 03, 2026, 06:02 PM UTC

    NTS TSS team is currently investigating the cause of this issues. The Iru prompt to sync your passwords is safe to ignore as best that you are able while we investigate why it is being prompted. If unable to log into your UA Mac, they try switching to Local login. To switch to local login: 1. Click the profile icon (the person inside a circle) in the upper-right corner of the screen. 2. Select Switch to Local Login. 3. Enter your University login credentials in the username and password fields that appear near the bottom center of the screen. 4. Click Sign In to log in. If you are still unable to log in, please contact your local IT Help Desk for further assistance. Thank you for your continued patience as we work towards a full resolution; we will make further updates at 3 hour intervals and as new information becomes available.

  4. investigating Aug 03, 2026, 07:44 PM UTC

    NTS TSS team is continuing to investigate the cause of this issues. There are no further updates at this time. The Iru prompt to sync your passwords is safe to ignore as best that you are able while we investigate why it is being prompted. If unable to log into your UA Mac, they try switching to Local login. To switch to local login: 1. Click the profile icon (the person inside a circle) in the upper-right corner of the screen. 2. Select Switch to Local Login. 3. Enter your University login credentials in the username and password fields that appear near the bottom center of the screen. 4. Click Sign In to log in. If you are still unable to log in, please contact your local IT Help Desk for further assistance. Thank you for your continued patience as we work towards a full resolution; we will make further updates at 1 hour intervals and as new information becomes available.

  5. monitoring Aug 03, 2026, 10:35 PM UTC

    We have resolved a recent issue caused by an unexpected change with Duo authentication that impacted managed macOS computer logins across campus. If you use a university-managed Mac, your login experience is now restored to normal operations. However, the first time you log back into your computer following this fix, you may see one or two additional Duo authentication prompts. When signing into your managed Mac for the first time today: 1. Enter your usual account credentials at the primary macOS login screen. 2. Complete the Duo prompt(s): You may be prompted to authenticate through Duo an extra time as system permissions refresh and re-sync with your account. 3. Approve the request on your Duo mobile app, hardware token, or via your preferred MFA method as normal. 4. Select Next at the Let’s keep your account secure prompt. 5. Select Next at the Set up a sign-in method prompt. If you continue to encounter login errors, repeated prompts to sync passwords on login, or any other issues logging into your Mac, please reach out to your campus IT Helpdesk.

  6. resolved Aug 26, 2026, 08:10 PM UTC

    This incident has been resolved.

  7. postmortem Aug 26, 2026, 08:11 PM UTC

    IRU Authentication Outage Problem Impact Analysis Event Occurrence: 20260803 # Background The IRU authentication service provides user authentication capabilities for managed macOS devices and web-based access through Kandji Passport. The service relies on integration between Kandji Passport, Microsoft Entra ID, Conditional Access policies, and Duo MFA to provide secure authentication for users. # Break Down of the Problem On August 3, 2026, users experienced authentication issues when attempting to access IRU services. The issue affected users attempting to authenticate through Kandji Passport Web Login and impacted the ability to complete the login process. The issue was investigated through Entra ID sign-in logs, Conditional Access policies, Duo MFA authentication flow, and Kandji Passport authentication services. # Target State / Goal A functional authentication into IRU-managed macOS devices. # Root Cause Analysis ‌ Changes to Microsoft’s Conditional Access methods, effective as of Jun 15, 2026: * [https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-enforcement-resource-exclusions](https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-enforcement-resource-exclusions) * [https://techcommunity.microsoft.com/blog/microsoft-entra-blog/upcoming-conditional-access-change-improved-enforcement-for-policies-with-resour/4488925](https://techcommunity.microsoft.com/blog/microsoft-entra-blog/upcoming-conditional-access-change-improved-enforcement-for-policies-with-resour/4488925) The changes outlined above now require DUO to be set as the default login method on a user’s account in M365. # Develop Countermeasures Immediate countermeasure developed by adding users to Entra group that enabled the newer DUO authentication method. # Implementation of Countermeasures IT staff completed a change that added all users to receive this fix. # Follow Up / Review Regularly review progress of long term solution implementation.

Your product runs on more than University of Alaska

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →