Troubleshooting Microsoft sign-in issue with OIDC flow for organization/school users

Guanda Li 0

I'm trying to implement sign-in with Microsoft using the OIDC flow in my application. However, when I test with my work account or Microsoft account xxx@microsoft.com, I get error messages saying that the Microsoft account doesn't exist or that the account can't be used for this purpose because it belongs to an organization. My application manifest includes "signInAudience": "AzureADandPersonalMicrosoftAccount". Can anyone help me troubleshoot this issue?

James Hamil 25,636 Reputation points Microsoft Employee

2024-06-20T18:49:23.38+00:00

Hi @Guanda Li , can you please post a screenshot of the full error message? In the meantime, this document details possible limitations to avoid.

Please let me know and I can help you further.

Best,

James
Guanda Li 0 Reputation points

2024-07-01T08:18:20.95+00:00

Thanks for the reply @James Hamil

Account Not Found.png

Here is one error, my account has M365 license. But it shows account not found here.
Guanda Li 0 Reputation points

2024-07-01T08:20:18.9766667+00:00

And here is the other error I'm getting. I'm just trying with a fake Microsoft company account here.

Organization Error.png
Guanda Li 0 Reputation points

2024-07-01T08:22:47.38+00:00

The use case here is that for accounts signed in with their company account. E.g: HR of Microsoft. They should be able to use Microsoft sign-in if the MX record is found to be Microsoft.
James Hamil 25,636 Reputation points Microsoft Employee

2024-07-01T18:23:34.7733333+00:00

Hi @Guanda Li , if you're using an external identity like indeed, you need to add it as an identity provider. For your second error, to use a Microsoft account you need to make sure that it is a personal Microsoft account and not associated with an organization. You can create a new personal Microsoft account if you don't already have one.

Please let me know if you have any questions and I can help you further.

If this answer helps you please mark "Accept Answer" so other users can reference it.

Thank you,

James
Guanda Li 0 Reputation points

2024-07-02T09:42:38.02+00:00

Thanks for explaining this! @James Hamil

I'm still a little bit confused about the second error. I followed the instruction here to configure the sign-in audience of my application to be both personal and organization. Do you know why am I still getting that error and how can I support organization accounts in that case?
Guanda Li 0 Reputation points

2024-07-11T21:20:47.7566667+00:00

Hi @James Hamil do you have an answer for this? Thanks a lot for looking into this issue!

Share via

Troubleshooting Microsoft sign-in issue with OIDC flow for organization/school users

Your answer