CAA20002 Severity: High Could not connect to Microsoft servers
Teams reports CAA20002 during sign-in. Usually caused by a blocked network, outdated TLS settings, or a corrupted token cache.
Affected systems
Symptoms
- Sign-in fails with CAA20002
- Teams hangs on the login screen
- Other Microsoft services in the browser keep working
Possible causes
- Cache full of expired auth tokens
- Active VPN or proxy blocks login.microsoftonline.com
- TLS 1.2 disabled on the machine (rare, mostly Windows 7 legacy)
- Wrong date or timezone setting
Solutions
1.Clear the Teams cache fully
-
Quit all Teams processes via Task Manager or Activity Monitor.
-
Delete the cache folder.
%appdata%\Microsoft\Teams~/Library/Application Support/Microsoft/Teams -
For the new client, also delete this folder.
%localappdata%\Packages\MSTeams_8wekyb3d8bbwe\LocalCache~/Library/Group Containers/UBF8T346G9.com.microsoft.teams -
Restart Teams and sign in fresh.
2.Disable VPN and test proxy
-
Disconnect the VPN tunnel and try sign-in without it.
-
If your company uses a proxy, verify login.microsoftonline.com and teams.microsoft.com are reachable.
-
Microsoft lists the endpoints at https://learn.microsoft.com/microsoft-365/enterprise/urls-and-ip-address-ranges
-
Ask IT to allowlist the Microsoft 365 endpoints if needed.
3.Verify TLS 1.2 (Windows only)
Windows
-
Open 'Internet Options' (inetcpl.cpl) via Run.
-
Advanced tab, ensure 'Use TLS 1.2' and 'Use TLS 1.3' are enabled.
-
Apply and reboot.
4.Verify date and time
Windows
-
Settings, Time and Language, Date and Time.
-
Enable automatic time and timezone sync.
-
Click 'Sync now'.
macOS
-
System Settings, General, Date and Time.
-
Enable 'Set date and time automatically'.
-
Set timezone to 'Automatic' as well.
Useful links
- Microsoft 365 Endpoints - what IT needs to allowlist
- Microsoft 365 Service Health - check ongoing incidents
- Microsoft Learn - Teams Sign-in Errors
Background
CAA20002 is almost always a client-side issue, not a server outage. If your account works fine on office.com in a browser, the cache reset fixes more than 80 percent of cases. If it also fails there, it is the network or account, not the Teams client.