# Customers on private tenants with BYOK are not able to log in

- Provider: [Mural](https://down.guide/mural)
- Level: confirmed
- Impact: Degraded
- lasted 2h 26m
- started 2022-05-02 13:58 UTC
- Authentication, Billing, Learning +8
- id: DWN-ea416a7229
- Official page: https://stspg.io/h89pcrkwl1vq

## Updates from Mural
### 2022-05-02 13:58 UTC: investigating
Some users are currently unable to sign in to MURAL. We know this is a major service disruption. We're investigating the issue and working to restore regular service as soon as possible. Please check our status page for the most up-to-date info status.mural.co

### 2022-05-02 14:17 UTC: monitoring
A fix has been implemented and we are monitoring the results.

### 2022-05-02 15:05 UTC: monitoring
We are continuing to monitor for any further issues.

### 2022-05-02 16:24 UTC: resolved
This incident has been resolved

### 2022-05-17 16:56 UTC: postmortem
\*\*What happened?\*\*
A small number of customers using BYOK experienced an issue with logging in to the MURAL application. Authentication requests were being redirected from their customer tenants to the main \[app.mural.co\](http://app.mural.co) tenant, resulting in their users being unable to log in. Initial reports of this were received from MURAL customers on Sunday May 1st. Further reports were received on Monday May 2nd, at which point the issue was classified as a major incident and our task force was engaged.
‌
\*\*Summary\*\*
MURAL’s task force started investigating at 13:58 UTC on Monday May 2nd. The cause of the issue was identified as being an incorrect configuration in how users on custom tenants were being routed through the login process. Once the issue was identified, a fix was rolled out at 14:07 UTC. This immediately corrected the login flow for clients using BYOK.
‌
‌\*\*What we've done to avoid this happening again\*\*
Parts of the login flow for BYOK clients had been hard-coded. We have changed this to be dynamically generated, reducing the risk of code-based errors. We are also researching avenues to improve the automated monitoring of login issues.

---
down.guide reads providers' official status pages every minute and adds its own evidence, always labeled. Free, no account. Agents: MCP at https://down.guide/mcp, REST at https://down.guide/api/v1, feeds at https://down.guide/feed. Built by Sazabi (https://sazabi.com/?utm_source=down-guide&utm_medium=markdown).