Increased Error Rates

2:15 PM PDT We are investigating increased error rates for SSO in the US-EAST-1 Region.

2:44 PM PDT We can confirm an issue that is preventing customers from establishing new sessions or re-authenticating existing sessions as the authentication page is not available. Existing sessions are not affected by this issue, but will experience difficultly re-authenticating should the existing session expire. This issue is affecting AWS services that use sign-in authentication, including Single Sign-on, Workspaces, WorkMail, Connect, Directory Service, QuickSight and WorkDocs. This issue does not affect authentication using IAM users or roles. We are working to resolve the issue and will provide you with regular updates.

3:17 PM PDT We continue to work on resolving the issue preventing customers from establishing new sessions or re-authenticating existing sessions as the authentication page is not available in the US-EAST-1 Region. We have identified the root cause of the issue, which is within the subsystem responsible for hosting the authentication page. Customers attempting to establish a new session or re-authenticate an expired session may experience increased error rates (503/504) when attempting to access the authentication page. In some cases, retries will succeed and allow for the session to be re-authenticated. Engineers are working to resolve the issue, but we do not yet have an ETA for resolution. We are working on mitigations now, and will provide a crisper ETA in the next update. The issue continues to affect AWS services using sign-in authentication, including Single Sign-on, Workspaces, WorkMail, Connect, Directory Service, QuickSight and WorkDocs. Note that should these services be configured to use other authentication types, such as IAM or SAML, they will not be affected by this issue. This issue does not affect authentication using IAM users or roles. We are working to resolve the issue and will provide you with regular updates.

3:50 PM PDT We continue to work on resolving the issue preventing customers from establishing new sessions or re-authenticating existing sessions as the authentication page is not available in the US-EAST-1 Region. Over the last 30 minutes we have made progress in addressing the issue and error rates with the authentication page have begun to improve. In many cases, retries are now working, allowing for authentication to be completed. While we have seen an improvement in error rates, they have not yet returned to normal levels, so engineers remain engaged and working to fully resolve the issue. We expect error rates to continue to drop over the next hour, but are still not certain on an exact ETA for full resolution of the event.

4:37 PM PDT We have seen error rates improve substantially for the issue preventing customers from establishing new sessions or re-authenticating existing sessions as the authentication page is not available in the US-EAST-1 Region. In several cases, customers are seeing recovery and have been able to authenticate their sign-in requests. We continue to work on the remaining error rates, which continue to cause some issues with the access to the authentication page. At this stage, retrying requests should allow for authentication requests to succeed. This issue does not affect authentication using IAM users or roles. We will continue to provide updates as we work to fully resolve the issue.