A cloud-based identity and access management service for securing user authentication and resource access
Large Scale Correlation ID Reuse
Kristoper Parmley
0
Reputation points
We have an issue where the Entra Correlation ID is being reused a substantial number of times over a substantial time frame. There is one correlation ID that has over 200 users per day showing under it, based on the logs this goes back months with thousands of users all with the same correlation id.
Is there any known cause of correlation id reuse, especially at this scale? There are some commonalities in the events, all were using browsers to connect to Office 365 Exchange Online, though the specific browser and OS vary wildly.
Microsoft Security | Microsoft Entra | Microsoft Entra ID
Microsoft Security | Microsoft Entra | Microsoft Entra ID
Sign in to answer