A Microsoft Entra security update is locking users out of their accounts