Share via

The service principal for resource '{identifier}' is disabled.

Mina 0 Reputation points
2024-06-25T06:32:08.9666667+00:00

I'm getting this error message when I try to login to MS office

"The service principal for resource '{identifier}' is disabled. This indicate that a subscription within the tenant has lapsed, or that the administrator for this tenant has disabled the application, preventing tokens from being issued for it."

I've assigned Microsoft 365 Business Standard License to this user but the user can't login. Any suggestions to solve this issue?

thanks in advance

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,443 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Sandeep G-MSFT 16,521 Reputation points Microsoft Employee
    2024-06-25T13:15:10.2833333+00:00

    @Mina

    Thank you for posting this in Microsoft Q&A.

    As I understand when user tries to login to application configured in your tenant, they are getting error AADSTS500014

    This can be caused when the underlying Service Principal used as the app identity of the cited resource might be disabled.

    You can have an AAD/Global Admin run the following from an AzureAd PowerShell window.

    • Open Windows PowerShell as administrator.
    • Run command “Install-Module azuread”.
    • Once installed you can run command “Connect-AzureAD” and enter user credentials once it asks for.
    • Now run comment "Set-AzureADServicePrincipal -ObjectId <Service Principal Object Id> -AccountEnabled $true".

    Apart from this you can also check if this application is enabled for user sign-in.

    Let me know if you have any further questions.

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.