Can't authenticate through Entra to Windows Admin Center

Question

Can't authenticate through Entra to Windows Admin Center

Jonathan Posey 40

I have an on-prem AD synced to Entra, and I'm a global administrator on the Azure tenant. I just set up Windows Admin Center with the hope of authenticating through Entra to it. I'm getting this error after entering my creds. The application is an app registration representing the on-prem domain. When I look at all the links to troubleshoot it, they link me to enterprise apps. Either place, there's no place to add users. Can someone point me in the right direction here? Is it a license issue that it's just not telling me about? I'm new to Entra and using the free version.

entra-2

entra-4

entra-1

Fabio Andrade 1,665 Reputation points Microsoft Employee Moderator

2024-06-26T23:33:04.0233333+00:00

Hi @Jonathan Posey

Thanks for reaching out to Microsoft Q&A.

Yes, Group-based assignment requires Microsoft Entra ID P1 or P2 edition. Group-based assignment is supported for Security groups, Microsoft 365 groups, and Distribution groups whose SecurityEnabled setting is set to True only. Nested group memberships aren't currently supported. For more licensing requirements for the features discussed in this article, see the Microsoft Entra pricing page.

As an alternative, you can disable this requirement through the app properties:

https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/assign-user-or-group-access-portal?pivots=portal

Let me know if you have any questions.

Thanks,

Fabio
Jonathan Posey 40 Reputation points

2024-06-27T16:30:55.41+00:00

Thanks. I actually fixed it last night, but now I have a new issue that I posted about here:

[https://learn.microsoft.com/en-us/answers/questions/1767318/enabling-sso-for-enterprise-app(local-active-direc](https://learn.microsoft.com/en-us/answers/questions/1767318/enabling-sso-for-enterprise-app(local-active-direc)

Basically, this is just to allow my IT team to connect to WAC, but the link is saying I need to do some process and create documentation to make it work? I'm just wondering if there's any simpler way to do it.

I'm also wondering if there's some video out there that details how to use entra auth for WAC. I can't seem to find any resources.

Accepted answer

0 additional answers

Your answer

Fabio Andrade 1,665 Reputation points Microsoft Employee Moderator

2024-06-26T23:33:04.0233333+00:00

Hi @Jonathan Posey

Thanks for reaching out to Microsoft Q&A.

Yes, Group-based assignment requires Microsoft Entra ID P1 or P2 edition. Group-based assignment is supported for Security groups, Microsoft 365 groups, and Distribution groups whose SecurityEnabled setting is set to True only. Nested group memberships aren't currently supported. For more licensing requirements for the features discussed in this article, see the Microsoft Entra pricing page.

As an alternative, you can disable this requirement through the app properties:

https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/assign-user-or-group-access-portal?pivots=portal

Let me know if you have any questions.

Thanks,

Fabio
Jonathan Posey 40 Reputation points

2024-06-27T16:30:55.41+00:00

Thanks. I actually fixed it last night, but now I have a new issue that I posted about here:

[https://learn.microsoft.com/en-us/answers/questions/1767318/enabling-sso-for-enterprise-app(local-active-direc](https://learn.microsoft.com/en-us/answers/questions/1767318/enabling-sso-for-enterprise-app(local-active-direc)

Basically, this is just to allow my IT team to connect to WAC, but the link is saying I need to do some process and create documentation to make it work? I'm just wondering if there's any simpler way to do it.

I'm also wondering if there's some video out there that details how to use entra auth for WAC. I can't seem to find any resources.

Answer 1

Hi @Jonathan Posey

Thank you for posting this in Microsoft Q&A.

I understand that you are trying to authenticate to Windows Admin Center using your Entra credentials, but you are encountering an error "Error AADSTS50105 - The signed in user is not assigned to a role for the application".

The AADSTS50105 error occurs during federated authentication with Microsoft Entra ID when a user tries to sign in to an application that has been set up to use Microsoft Entra ID for identity management using SAML-based Single Sign-On (SSO), but the user has not been granted access to the application in Microsoft Entra ID.

To resolve this error, the user must belong to a group that is assigned to the application or be assigned directly. This can be done by adding the user to a group that has been assigned to the application or by assigning the user directly to the application. Once the user has been granted access to the application in Microsoft Entra ID, they should be able to sign in to the application using SAML-based SSO without encountering the AADSTS50105 error.

Please follow the steps which mentioned in this document: Assign users to an application.

For your reference: Error AADSTS50105 - The signed in user is not assigned to a role for the application

Hope this helps. Do let us know if you any further queries.

Thanks,

Navya.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

Share via

Can't authenticate through Entra to Windows Admin Center

0 additional answers

Your answer