One of my favorite modern cybersecurity design things is when something on the server side authentication fails instead of your actual credentials / MFA, but the failure error message is identical so you spend an hour doing resets and second guessing yourself only to have everything work perfectly a little later on.
@hacks4pancakes Yes! Just did this recently when there was a Duo SSO outage. We assumed it was a proxy failure and I scrambled to set up SAML to Azure AD instead, only to get an outage notice 5 minutes after I finished.