Validation encountered unpredictable WebExceptionĪ transient error. The username passed to the agent was not validĮnsure the user is attempting to sign in with the right username. If the user is unable to sign into using Pass-through Authentication, they may see one of the following user-facing errors on the Azure AD sign-in screen: ErrorĮnsure that agent servers are members of the same AD forest as the users whose passwords need to be validated and they are able to connect to Active Directory.Ī timeout occurred connecting to Active DirectoryĬheck to ensure that Active Directory is available and is responding to requests from the agents. You can check status by going to the Azure AD Connect blade on the Entra admin center. General issues Check status of the feature and Authentication AgentsĮnsure that the Pass-through Authentication feature is still Enabled on your tenant and the status of Authentication Agents shows Active, and not Inactive.

Doing this step is critical and ensures that you don't get locked out of your tenant. Learn about adding a cloud-only Global Administrator account. If you are facing user sign-in issues with Pass-through Authentication, don't disable the feature or uninstall Pass-through Authentication Agents without having a cloud-only Global Administrator account or a Hybrid Identity Administrator account to fall back on.

Active directory mfa on premise