Article ID: 2671093 - View products that this article applies to.
Consider the following scenario: A user can't sign in to a Microsoft cloud service such as Office 365, Microsoft Azure, or Microsoft Intune by using a user ID that's a member of a cloud service domain that was formerly set up for single sign-on (SSO). In this scenario, when a cloud service admin tries to reset the user’s password by using the cloud service portal or Azure Active Directory Module for Windows PowerShell, the administrator receives the following error message:
Unable to reset this user’s password. Try again later.
This issue occurs if the user is a member of a cloud service domain that was formerly single sign-on (SSO)-enabled and if the user ID wasn't converted to use standard authentication.
For example, this issue can occur if the following Windows PowerShell cmdlet was used:
To resolve this issue, convert the user ID to a standard (non-federated) type. To do this, follow these steps:
Note The Windows PowerShell cmdlets in this article require the Azure Active Directory Module for Windows PowerShell.
For more information about the Azure Active Directory Module for Windows PowerShell, see Manage Azure AD using Windows PowerShell
Still need help? Go to the Office 365 Community
(http://community.office365.com/)website or the Azure Active Directory Forums
Article ID: 2671093 - Last Review: December 12, 2014 - Revision: 21.0