another AADSTS50020 error + oauth 105 error

Question

I'm having another AADSTS50020 error: User account '{EmailHidden}' from identity provider 'live.com' does not exist in tenant 'Microsoft Services' and cannot access the application 'c44b4083-3bb0-49c1-b47d-.....'(Azure Portal) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account.

Background: In 2021 I started using a personal account, in Azure, for creating apps. Those apps are used in a Saas platform that I am working on.

At the moment, I am able to log in into Azure, but everything that I do I get the error mentioned in the title. I can't even submit a support ticket.
I've google a lot, but I couldn't find a solution for this.
I must mention that I have no tenant, I don't remember setting up anything about a tenant, my personal account is using a gmail address.

Is there anything I can do to get this fixed?

Also, while using the same client id + secret, for an app that used to do work last year, now it's not working anymore, and I am getting a 105 "Authentication failed. Either supplied credentials are invalid or the account is inactive".

What solutions do I have to fix this? I don't even know where to being with.

Thank you very much for helping out.

Answer 1

Hi @AdrianI ,

The error is because you don't have a tenant associated with your account.

To create a tenant you must have an active subscription:

https://learn.microsoft.com/en-us/azure/active-directory/develop/quickstart-create-new-tenant

If you already have a Azure AD tenant you need to associate (invite) your account with that tenant.

Hope this helps!

Answer 2

Solution: Change the sign-in audience setting in the app registration manifest
To make sure that your app registration isn't a single-tenant account type, perform the following steps:

In the Azure portal, search for and select App registrations.

Select the name of your app registration.

In the sidebar, select Manifest.

In the JSON code, find the signInAudience setting.

Check whether the setting contains one of the following values:

AzureADandPersonalMicrosoftAccount
AzureADMultipleOrgs
PersonalMicrosoftAccount
If the signInAudience setting doesn't contain one of these values, re-create the app registration by having the correct account type selected. You currently can't change signInAudience in the manifest.

Regards,
Rachel Gomez