Sub-set of customers on enterprise environments not able to establish new logins

Overview:

On December 12th, 2023, between 10:41 AM and 12:42 PM MST, users on the Enterprise 2 environment encountered issues logging in due to a constraint on the Active Directory RID pool. This prevented the creation of new sessions for users logging in during that window.

Cause of the Issue:

Two factors contributed to reaching the RID pool limit:

• Frequent user addition/deletion: Existing SAP user control mechanisms already necessitate frequent user account creation and deletion within Active Directory, contributing to RID pool consumption.
• New user control functionality: Newly implemented user control functionality unintentionally led to additional pressure on the RID pool.

Resolution:

Our DevOps team identified the issue at 12:42 PM MST and promptly increased the RID pool limit, resolving the login problems and restoring full functionality. Additionally, they have addressed the issue within the new user control mechanism that contributed to the RID pool constraint and are actively monitoring the RID pool to prevent similar occurrences in the future.