Cloud Drive Mapper Legacy Access Denied message

We are continuing to monitor for any further issues.

Microsoft rollout of RPS Hard Enforcement

Prior to October 20th
Per our previous Status Page communications, Microsoft are now moving to permanently enforce deprecation of the legacy authentication protocol Relying Party Suite (RPS).

The original MS communication can be found here.

Soft Enforcement commenced August 14th and completed on the 5th September. Impacted IAM Cloud customers had 3 options to protect service during this time;
- Update v2 to a protected version (v2.23 or greater)
- Remain sub 2.23 but execute the IAM Cloud-provided script which regressed the MS change and allowed communication to continue via RPS
- Migrate to v3

20th October onwards
Microsoft have now commenced Hard Enforcement of the RPS change; the protocol can no longer be re-enabled and is permanently deprecated.

For IAM Cloud users, this means the following;
- CDM versions prior to v2.23 are no longer considered as supported. Versions below 2.23 have been rendered non-functional by the RPS change and therefore we cannot continue to provide break fix / troubleshooting support
- For customers now experiencing service disruption on versions prior to 2.23 and who wish to remain on v2, update to v2.25 is required. Customers can follow this link - https://downloads.iamcloud.net/cdm/legacy/releases-latest/setupcdmx64.msi
- Alternatively, customers can migrate to the latest CDM v3 release, which is available via Iris. CDM v3 is unaffected by the RPS changes. However, we do not recommend rushing migration as v3 is different technology to v2 and requires a greater level of pre-deployment testing. More details on CDM v3 can be found here - https://cdm.iamcloud.info/docs/Content/Upgrade/Upgrade_WithTiles.htm

We are providing support as normal to all users on v2.23+ and v3. Please also contact us should you require assistance updating or migrating your current version.

We are continuing to monitor for any further issues.

We are continuing to monitor for any further issues.

Microsoft is currently making a change to its RPS service within SharePoint Online that can stop CDM V2's authentication and ability to map drives.

There are three things you can do to resolve the issue:

1) Upgrade CDM V2 to our latest build CDM 2.24 (download available at https://resources.iamcloud.net). CDM 2.24 doesn't require RPS to authenticate, and is a permanent fix to this issue.

2) If your tenancy has already been hit by the change in the RPS service and you are under pressure to get colleagues back up and running ASAP, there is a simple fix you can do to temporarily resolve the issue: re-enable RPS.

How to re-enable RPS using PowerShell:

Download this script: https://downloads.iamcloud.net/cdm/legacy/scripts/LegacyAuthProtocol.ps1

You need to be a Microsoft 365 Global Admin to run it successully, and please ensure you are using PowerShell version 5.x (not 7.x).

Run the script.

Provide your SharePoint domain prefix (e.g. example for example-admin.sharepoint.com)

The script works by setting the following property on your tenancy using SharePoint REST:

AllowLegacyBrowserAuthProtocolsEnabledSetting $true

Once you've run this, all versions of CDM V2 should start working again. But this is temporary, and will only work until 15th October 2025, when Microsoft have informed us they will start to remove RPS entirely (Hard Enforcement). As such, we still recommend upgrading to 2.24 as soon as possible too.

3) Upgrade to CDM V3 - which is unaffected by these changes. However we don't recommend you rush this, as V3 is different technology to V2 and requires more substantial testing in your environment before deployment.

As such our recommendation would be for all V2 customers to upgrade to 2.24 ASAP, which should be a relatively simple update, then start their journey with testing V3, ready for a potential roll-out within the next few months.

We are aware of a change Microsoft is making to its RPS service within SharePoint Online that can break CDM V2's authentication and ability to map drives.

We have more information on this coming soon.