How to fix this error: InvalidAuthenticationTokenTenant?

Question

I have used Azure for years but recently I couldn't access my storage containers. The error message is InvalidAuthenticationTokenTenant. What should I do?

Answer 1

Hello @H Pan

Welcome to Microsoft QnA!

I can understand you are facing an authentication issue

Can you provide a bit more context , like is this programmatically access ?

Is this a Portal error ?

Kindly let us know and if possible provide some logs or data from the error!

--

I hope this helps!

Kindly mark the answer as Accepted and Upvote in case it helped!

Regards

Answer 2

Hello @H Pan

as you can understand the issue seems to be a login from a different not authoritative Tenant

If you are on the Portal go t the upper right menu and chang the Directory to the one with the ID below

If you are on CLI try:

az login --tenant 6e1261dd-7d97-427d-9da2-7487633446f6

I am postive you will find it . Unless it is an Azure Issue, try logout - login to the CORRECT directory

--

I hope this helps!

Kindly mark the answer as Accepted and Upvote in case it helped!

Regards

Answer 3

Hello H Pan,

Greetings! Welcome to Microsoft Q&A Platform.

The InvalidAuthenticationTokenTenant error typically occurs when the access token is issued by a tenant that doesn’t match the one associated with your Azure subscription and it must match one of the tenants associated with this subscription.

To resolve this issue, you can try the following steps:

• Make sure that the tenant ID and subscription ID are correct in your profile showing on top right corner of Azure Portal Page - which should show the associated tenant details.
• Check if the Azure CLI is logged in with the correct account. You can use the following command to check:

az account show

• If the account is not correct, you can use the following command to log in:

az login

• If you are using a service principal for authentication, make sure that the service principal has the correct permissions to access the subscription and the tenant.

This will set the authority to 'https://login.microsoftonline.com/'.

• The other reason could be as mentioned in the error "if the subscription is transferred to another tenant there is no impact to the services, but information about new tenant could take time to propagate (up to an hour). If you just transferred your subscription and see this error message, please try back later". In case if you have transferred the subscription to different tenant then please wait for some hours and retry the operation again.

Hope this answer helps! Please let us know if you have any further queries. I’m happy to assist you further.

---

Please "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.