Message: AADSTS90072: User account '******@yahoo.com' from identity provider 'live.com' does not exist in tenant 'CSU Students' and cannot access the application

Question

I get this message when trying to sign into my school account - HELP!!

Message: AADSTS90072: User account 'XXXXXXXXXXXXXX' from identity provider 'live.com' does not exist in tenant 'CSU Students' and cannot access the application '0a14501e-1816-46a7-bc7f-daaa484fb9a8'(StudentCAS) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account

Answer 1

The AADSTS90072 error message you're encountering indicates a specific issue with your attempt to log into an account related to Azure Active Directory (AAD). Here's an explanation of what this error means and how you can proceed to resolve it:

Explanation of the Error

• User Account Does Not Exist in the Tenant: The error indicates that the email account '******@yahoo.com' associated with the identity provider 'live.com' does not exist in the Azure AD directory (or tenant) named 'CSU Students'.
• Access to Application Denied: The account is trying to access an application identified as '0a14501e-1816-46a7-bc7f-daaa484fb9a8' (StudentCAS) within that tenant, but it can't because it is not registered or authorized in it.
• Need to Add as an External User: To gain access, the account needs to be added as an external (guest) user in the 'CSU Students' tenant.

Steps to Resolve

1. Contact Your School's IT Administrator: You should reach out to the IT department of your school (presumably Colorado State University, indicated by 'CSU Students') to inform them about this error. They have the capability to add your account as an external user in the Azure AD tenant.
2. Verify Email Account: Ensure you are using the correct email address provided by the school. Some institutions assign specific email addresses for academic purposes.
3. Try with Another Account: If you have another email account associated with your school identity, try logging in with that account.
4. Sign Out and Retry: As the message suggests, sign out of any Microsoft account you are currently using and try logging in again with the correct account.

Important

• Do Not Share Sensitive Information: Avoid sharing account or personal details in public forums or with unverified individuals.
• Follow Your School’s IT Policies: Ensure you adhere to the policies and procedures set by your educational institution for handling accounts and access.

Accept the answer if the information helped you. This will help us and others in the community as well.