Consider the following scenario: A user can't sign in to a Microsoft cloud service such as Office 365, Microsoft Azure, or Microsoft Intune by using a user ID that's a member of a cloud service domain that was formerly set up for single sign-on (SSO). In this scenario, when a cloud service admin tries to reset the user’s password by using the cloud service portal or Azure Active Directory Module for Windows PowerShell, the administrator receives the following error message:
Unable to reset this user’s password. Try again later.
This issue occurs if the user is a member of a cloud service domain that was formerly single sign-on (SSO)-enabled and if the user ID wasn't converted to use standard authentication.
For example, this issue can occur if the following Windows PowerShell cmdlet was used: