# Authentication Service Failures

- Provider: [JumpCloud](https://down.guide/jumpcloud)
- Level: confirmed
- Impact: Degraded
- lasted 10m
- started 2025-04-30 13:05 UTC
- LDAP - US Region, User Console - US Region, SSO - US Region
- us
- id: DWN-0b0fc5ccf1
- Official page: https://stspg.io/mw977tbpk6xr

## Updates from JumpCloud
### 2025-04-30 13:05 UTC: monitoring
We have identified an issue that was affecting authentication and SSO and have implemented a fix. Services have recovered and we are monitoring.

### 2025-04-30 13:15 UTC: resolved
This incident has been resolved.

### 2025-05-06 02:25 UTC: postmortem
!\[\](https://lh7-rt.googleusercontent.com/docsz/AD\_4nXdJTDHu6nwjsVpc24PfPik9fNRnfkb2sBFefB-1HYs\_wnxUsJ0-IK1zbL1gKs04ARc2-vsSp\_nQnSoe6yNYTEsMn4WGfj9WhaKd\_h8JP2eKDNXVk5C26nAawvYlx-nl7kXr0Zpj\_A?key=58dfg4GavX6z3tye\_szSU7MN)
# Incident Report
\*\*Date\*\*: May 5, 2025
\*\*Date of Incident:\*\* Apr 30, 2025
\*\*Description\*\*: RCA for User Portal / SSO Failed Authentication
‌
\*\*Summary:\*\*
On April 30th at 12:35 UTC our monitors detected a significant increase in errors across our User Console API endpoints. The increased errors manifested as failed authentication for new attempts to the User Portal, SSO and other services.  Existing connections to applications continued uninterrupted. At 12:41 UTC a formal incident was declared and multiple teams were paged. The issue was resolved at 12:58 UTC
‌
\*\*Root Cause:\*\*
A state transition anomaly occurred during the credential rotation process for a database within our authentication infrastructure, resulting in connection failures by dependent services to that layer. Consequently, end-users experienced authentication errors when attempting to establish new sessions with specific applications.
‌
The authentication service team was able to identify a failure with secondary credentials during the rotation and quickly failed back to valid secrets.
‌
‌
\*\*Corrective Actions / Risk Mitigation:\*\*
1. Fail back to primary secrets - DONE
2. Increased automation for secrets rotation at this layer - IN PROGRESS

---
down.guide reads providers' official status pages every minute and adds its own evidence, always labeled. Free, no account. Agents: MCP at https://down.guide/mcp, REST at https://down.guide/api/v1, feeds at https://down.guide/feed. Built by Sazabi (https://sazabi.com/?utm_source=down-guide&utm_medium=markdown).