I keep getting the same response when signing into Entra ID about authentication token and tenant

Question

I keep getting the same response when signing into Entra ID about authentication token and tenant

Siphokazi Oranuba 20

The portal is having issues getting an authentication token. The experience rendered may be degraded. Additional information from the call to get a token: Extension: Microsoft_Azure_Support Resource: self Details: The logged in user is not authorized to fetch tokens for extension 'Microsoft_Azure_Support' because the user account is not a member of tenant 'f8cdef31-a31e-4b4a-93e4-5f571e91255a'. Error details: invalid_grant: 50020 - [2024-11-27 11:46:09Z]: AADSTS50020: User account '{EUII Hidden}' from identity provider 'live.com' does not exist in tenant 'Microsoft Services' and cannot access the application 'c44b4083-3bb0-49c1-b47d-974e53cbdf3c'(Azure Portal) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account. Trace ID: 07d73c4b-66c8-4c2a-97c3-d0ab5fb73200 Correlation ID: fa98f5c9-7e7b-43ba-ad48-b29458dee2c6 Timestamp: 2024-11-27 11:46:09Z - Correlation ID: fa98f5c9-7e7b-43ba-ad48-b29458dee2c6 - Trace ID: 07d73c4b-66c8-4c2a-97c3-d0ab5fb73200

0 comments

Answer accepted by question author

Shikha Ghildiyal 7,255 Microsoft Employee Moderator

HI Siphokazi Oranuba

Thanks for reaching out to Microsoft Q&A.

The error message you’ve encountered suggests that the user attempting to authenticate and fetch tokens for the Azure portal extension (Microsoft_Azure_Support) is not a member of the Azure Active Directory (AAD) tenant (f8cdef31-a31e-4b4a-93e4-5f571e91255a). As a result, the application cannot authenticate or authorize the user for this tenant. Here's how to resolve the issue:

Understand the Error Details

AADSTS50020: This error indicates that the user account is from an identity provider (live.com, Microsoft personal account) and is not part of the specified Azure AD tenant (Microsoft Services).

Action Required: Add the user to the correct tenant or switch to an account that belongs to the tenant.

Solutions

a. Use a Different Account

Sign out from the current account and log in with an account that is a member of the Azure AD tenant (f8cdef31-a31e-4b4a-93e4-5f571e91255a).

Ensure this account has appropriate permissions to access the extension and fetch tokens.

b. Add the User as a Guest in the Tenant

If you need to use the current account:

Administrator Action Needed:

Ask the Azure AD tenant administrator to add your user account as a guest in the tenant:

Go to Azure AD > Users > New Guest User.

Enter your email address and invite yourself as a guest.

Accept the Invitation:

Check your email for the invitation link and accept it.

Once added, retry accessing the portal.

c. Check Application Permissions

Ensure the extension (Microsoft_Azure_Support) has the correct permissions:

An Azure AD administrator may need to grant consent for this application to access tenant resources.

Go to Azure AD > Enterprise Applications > Locate the application by ID c44b4083-3bb0-49c1-b47d-974e53cbdf3c and check permissions.

d. Clear Cached Credentials

Cached credentials might be causing issues. To clear them:

Sign out from all Azure-related services.

Clear your browser's cookies and cache.

Retry logging in with the correct account.

Resources for Further Help

Error Code Reference: Microsoft Identity Platform Error Codes

Support: Contact Azure support if the problem persists and you're unable to modify tenant settings.

Let me know if you need detailed steps for any of these resolutions!

Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.