The problem stemmed from Seamless SSO and Microsoft Entra Connect Sync, which caused DNS authentication failures. In its Azure Status web page, Microsoft explained that it recently made changes ...

Enable Multifactor Authentication Every Microsoft Azure customer should be using ... with multifactor authentication to enable single sign-on through applications on a device-by-device basis ...