AADSTS51004 problem on Azure with Google federation

Question

AADSTS51004 problem on Azure with Google federation

Anonymous

I have integrated Microsoft Office 365 App in Google Suite following the instructions. One domain works fine with SSO and user sync. Second domain is not pssible to logon: AADSTS51004: The user account ******@my2nd.de does not exist in the xxxxxxxx directory. To sign into this application, the account must be added to the directory. User UPN exsists an directory UUID xxxxxxx is correct. No one can logon anymore. Whats wrong? Thanks for help

Sandeep G-MSFT 20,911 Reputation points Microsoft Employee Moderator

2023-04-19T05:56:55.5+00:00

@Anonymous

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread.

4 answers

Your answer

Sandeep G-MSFT 20,911 Reputation points Microsoft Employee Moderator

2023-04-19T05:56:55.5+00:00

@Anonymous

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread.

Answer 1

HarmeetSingh7172 4,826

Hello Sascha Dierberg,

Thanks for reaching out!

As per the official documentation, AADSTS51004 error describes that the user account doesn’t exist in the directory. An application likely chose the wrong tenant to sign into, and the currently logged in user was prevented from doing so since they did not exist in your tenant. If this user should be able to log in, add them as a guest. Further information on add B2B users.

Hope this helps.

If the answer is helpful, please click Accept Answer and kindly upvote. If you have any further questions about this answer, please click Comment.

Anonymous

2023-04-14T14:29:30.8833333+00:00
Thanks, but there is only one tenant and the synchronization of these users works at the same time. So why should (which application) choose a wrong tenant? I try to logon the azure portal, get redirected to google login and back to azure, which told me this account did not exists - but it is there, since years...

Logins at MS are redirected to Google SSO

Users in Google are currently synchronized with AAD

UPNs are identical

"Primary email" ist connected to "IDPEmail" Who or what is wrong?
Roman Kolomiiets 0 Reputation points

2023-08-06T18:50:33.1066667+00:00

Faced the same problem when federating with g-suite, the user has existed in Azure for 2 years with identical mail and name, but he is not allowed into Azure because he writes an error that he does not exist. Were you able to solve the problem?

Answer 2

Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more

Answer 3

If the users were created in the Office 365 admin console , ImmutableID should be blank. To set the ImmutableID attribute for each of these users in Office 365 to match their UPN, use the Set-MsolUserPowerShell command: Set-MsolUser -UserPrincipalName ******@yourdomain.com -ImmutableID ******@yourdomain.com You can also use Set-MsolUserto bulk update all users. You can find specific instructions in the PowerShell documentation .

https://support.google.com/cloudidentity/answer/6363817?hl=es#zippy=%2Cpaso-configura-immutableid

Answer 4

O365 Buddy 111

If the users were created in the Office 365 admin console , ImmutableID should be blank. To set the ImmutableID attribute for each of these users in Office 365 to match their UPN, use the Set-MsolUserPowerShell command: Set-MsolUser -UserPrincipalName ******@yourdomain.com -ImmutableID ******@yourdomain.com You can also use Set-MsolUserto bulk update all users. You can find specific instructions in the

Share via

AADSTS51004 problem on Azure with Google federation

4 answers

Your answer