Large Scale Correlation ID Reuse

Kristoper Parmley 0 Reputation points
2026-08-12T12:29:13.5866667+00:00

We have an issue where the Entra Correlation ID is being reused a substantial number of times over a substantial time frame. There is one correlation ID that has over 200 users per day showing under it, based on the logs this goes back months with thousands of users all with the same correlation id.

Is there any known cause of correlation id reuse, especially at this scale? There are some commonalities in the events, all were using browsers to connect to Office 365 Exchange Online, though the specific browser and OS vary wildly.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.