Issue: User just changed their password and we can see the change on Entra but password verify still shows AD password is incorrect.
Cause: The account was locked on AD. That usually happens when a password is changed but user's devices have the old password stored and trying to connect to wireless, which uses AD for authentication. AD inadvertently detects these failed authentications as a password spray attack and locks the account.
Solution: AD admin has to unlock the account.