This page lists the known limitations of organization restrictions.
Organization restrictions header service failure
If the organization restrictions header service fails due to an internal failure, any request that presents the organization restrictions header bypasses organization restrictions enforcement until the failure is resolved.