Unable to use Azure Active Directory Free (error 403)

Irishman2020 1 Reputation point
2022-11-15T16:58:15.053+00:00

I was attempting to use my personal account to work with the free version of Azure AD, but I am running in to issues. I believe my account is somehow tied to an old work or school tenant, and I can't seem to clear it. I don't know what this tenant 'f8cdef31-a31e-4b4a-93e4-5f571e91255a' is from, and I am unable to create a new tenant.
When I go to https://aad.portal.azure.com/ I get a partially loaded page, where most of the content has errors on it. The error I get is below. Any help would be appreciated. I'd rather not create another account.

----------

The portal is having issues getting an authentication token. The experience rendered may be degraded.  
  
Additional information from the call to get a token:  
Extension: Microsoft_AAD_IAM  
Resource: microsoft.graph  
Details: The logged in user is not authorized to fetch tokens for extension 'Microsoft_AAD_IAM' because the user account is not a member of tenant 'f8cdef31-a31e-4b4a-93e4-5f571e91255a'. Error details: AADSTS50020: User account '{EmailHidden}' from identity provider 'live.com' does not exist in tenant 'Microsoft Services' and cannot access the application 'c44b4083-3bb0-49c1-b47d-974e53cbdf3c'(Azure Portal) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account.  
Trace ID: 2befbe8a-cb2e-4523-9ef9-546295d92a00  
Correlation ID: 9ef99c05-7a09-443b-948a-6641e9cdcab5  
Timestamp: 2022-11-15 16:45:43Z  

----------

----------

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,450 questions
{count} votes

1 answer

Sort by: Most helpful
  1. JamesTran-MSFT 36,656 Reputation points Microsoft Employee
    2022-11-16T22:41:04.997+00:00

    @Irishman2020
    Thank you for your post and for your time and patience throughout this issue!

    Error Message:
    AADSTS50020: User account '{EmailHidden}' from identity provider 'live.com' does not exist in tenant 'Microsoft Services' and cannot access the application '...cbdf3c' (Azure Portal) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account.

    From our Error AADSTS50020 - User account from identity provider does not exist in tenant documentation, your specific issue would be related to Cause 4 - Guest user wasn't invited.

    I looked at the logs using your Correlation ID and Timestamp from your error message, and the user that you're logging in with is coming from hotmail.com. Because the hotmail.com user that you're logging in with doesn't belong to the Azure AD tenant. You'll need to sign in with a user that's part of the tenant, or have an Admin re-invite you as a Guest user using your hotmail.com email address.

    If you want to use the free version of Azure AD and have never setup, or have been invited to an Azure AD tenant, you'll have to follow our Azure Free Trial or Pay-As-You-Go wizards to get started.

    Additional Links:
    Azure free account
    Pay as you go with Azure

    I hope this helps!

    If you have any other questions, please let me know.
    Thank you for your time and patience throughout this issue.

    ----------

    Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.