One of my favorite modern cybersecurity design things is when something on the server side authentication fails instead of your actual credentials / MFA, but the failure error message is identical so you spend an hour doing resets and second guessing yourself only to have everything work perfectly a little later on.
@hacks4pancakes I had a fun one a couple weeks ago where the network was complaining I needed a new password (we only do new passwords annually, also MFA).
Which was a great theory, except… the network wasn’t letting me on the network (because expired credentials), so it couldn’t pass my attempt to update password to a system that would then let me on the network.
(I eventually got it to work by hotspotting, logging onto my cloud account via web browser, and resetting password there, then I entered that into the network authentication and it let me in. But still frustrating to see the failure mode of ZT-ish architecture be something I could only fix by circumventing things)
