Topics Map > Accounts and Passwords

Login Issues with University Email and Canvas August 15, 2022

I am not able to login to services, what should I do?

Technology Services completed some configuration changes on Saturday August 13, 2022 . As a result, some users may experience some unexpected behavior when logging in and/or with their desktop applications.

If you are experiencing the following:

Desktop and mobile applications asking you to log in

  • Remember that you must now enter your full login address (most likely your University email address, netid@illinois.edu)
  • Please log in and use the Duo multi-factor application (if applicable) and it should solve the issue.
  • If you access mail from a mobile device you may need to re-enter your password and use Duo in account settings to access your mail.

Error message: Message: AADSTS50107: The requested federation realm object 'http://illinois.edu/adfs/services/trust/' does not exist.

  • This error stems from using a bookmark or link pointing to the old sign-on page.
  • You can access email by going to this URL: https://outlook.office.com
  • Need to access other services? The 'Log In To Services' section of the Technology Services homepage (https://techservices.illinois.edu) has direct links to many commonly used university services.
  • If you were using a bookmark, please delete it and create a new one with the correct link.
  • If you're still having issues, try to clear browser cache and/or restart any affected applications. Instructions for clearing cache can be found here: Browsers, Clearing Cache and Cookies

Still having login issues?

Here are some more technical troubleshooting steps and information (from Identity Management, Troubleshooting and Solutions for using Urbana Single Sign-On Pages)

 

Urbana users logging into Microsoft365 (Outlook, Word, Excel, etc.) or Shibboleth (Canvas, Box, Zoom, Moodle, etc.) applications will now authenticate with their full login address (most likely their University email address, netid@illinois.edu)

An overview of the Urbana Single Sign-On pages can be found here (Identity Management, Urbana Single Sign-On Pages) and an overview of the Duo Universal Prompt can be found here (2FA, Duo Universal Prompt Overview).

Possible Issues:

Error message: Message: AADSTS50107: The requested federation realm object 'http://illinois.edu/adfs/services/trust/' does not exist.

Incorrect login address

AzureAD - the technology behind our new sign-in pages - uses the UserPrincipalName attribute as the login address. For most people, this will be their email address.

NOTE for IT Pros:

  • Some non-person accounts (also known as resource or service accounts) have a UserPrincipalName with the @ad.uillinois.edu domain.
  • Accounts must be synced to AzureAD in order to be used for authentication. Newly created objects may take an hour or so to be synced up to the cloud. Existing service accounts need to have the O365 attribute and proper UPN to be set or be mail enabled. More information here: Azure Active Directory - How Do I Provision an Account to AzureAD?
  • IT Pros can verify an account's UserPrincipalName with the following PowerShell command (make sure the Active Directory module is installed): Get-ADUser $accountname | select UserPrincipalName

If a user attempts to log in with just their NetID or with an incorrect login address, their login attempt will fail. Depending on what they type in, they may experience one of the following:

  • An error message stating "This username may be incorrect. Make sure you typed it correctly. Otherwise, contact your admin."
  • An error message stating "We couldn't find an account with that username. Try another, or get a new Microsoft account."

'Forgot Password' Link

The AzureAD login page features some customization specific to our campus, however currently the 'Forgot Password' link directs to a Microsoft Self-Service Password Reset (SSPR) page, instead of to our NetID Center. Users who attempt to reset their password through the Microsoft SSPR page will not be successful. This is the same for the 'reset it now' link if users enter an incorrect password.

Instead, if users are having issues with their password, they can click on the 'Change your password' link, in the 'Troubles logging in?' section.

See the below screenshot depicting where users should click:

Screenshot indicating users should click on change your password if having issues logging in

Duo Prompt Message: "No access to server. The page cannot load without access to your server"

This issue can occur if your Windows operating system is out of date. Resolution would be to update the impacted machine to Windows patch 1909 or greater.

Additional information can be found here.

Duo error message cannot access server

Potential Browser Issues

The AzureAD login page has been thoroughly tested for compatibility, but it is still possible that issues will be encountered:

  • JavaScript is required for AzureAD sign-on pages (and is typically enabled by default in a browser). If a user receives a message related to JavaScript being disabled or blocked, please have them check browser settings or attempt logging in via a different browser.
  • The AzureAD login page is located at login.microsoftonline.com and the Duo Universal Prompt is located at duosecurity.com. Please make sure these domains are whitelisted if needed.
  • In addition, the interest of user and system security, a minimum browser version is enforced for logins. The minimum supported versions for the browsers listed have all been released for at least four years. 
    Minimum browser versions that support the 'SameSite' cookie attribute:
    • Chrome version 61
    • Edge version 16
    • Firefox version 60
    • Safari version 12
    • Users may see a Shibboleth stale request window like the one below if using an old unsupported browser:
      Shib stale request window

If standard troubleshooting steps have been followed and a user is still experiencing a browser based login issue, please note what has been tried so far and send a ticket to the Help Desk.

 




Keywords:email can't login canvas login issues problem sso incorrect AADSTS50107 duo mobile sign in The requested federation realm object 'http://illinois.edu/adfs/services/trust/' does not exist Incorrect login address No access to server. The page cannot load without access to your server password writeback write back loginissues   Doc ID:120603
Owner:ID M.Group:University of Illinois Technology Services
Created:2022-08-15 08:29 CSTUpdated:2022-08-24 15:19 CST
Sites:University of Illinois System, University of Illinois Technology Services
CleanURL:https://answers.uillinois.edu/illinois/loginissues
Feedback:  1   10