The portal is having issues getting an authentication token. The experience rendered may be degraded.

Sura Karthikeya 0 Reputation points
2023-06-30T16:55:41.6433333+00:00

Additional information from the call to get a token: Extension: Microsoft_Azure_Support Resource: self Details: The logged in user is not authorized to fetch tokens for extension 'Microsoft_Azure_Support' because the user account is not a member of tenant 'f8cdef31-a31e-4b4a-93e4-5f571e91255a'. Error details: invalid_grant: 50020 - [2023-06-30 16:49:31Z]: AADSTS50020: User account '{EmailHidden}' from identity provider 'live.com' does not exist in tenant 'Microsoft Services' and cannot access the application 'c44b4083-3bb0-49c1-b47d-974e53cbdf3c'(Azure Portal) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account. Trace ID: 231cdc99-b95c-48b1-9408-074fc911c900 Correlation ID: 689232d8-bbe2-487d-983e-dc3950e99bbe Timestamp: 2023-06-30 16:49:31Z - Correlation ID: 689232d8-bbe2-487d-983e-dc3950e99bbe - Trace ID: 231cdc99-b95c-48b1-9408-074fc911c900

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,919 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Sandeep G-MSFT 20,376 Reputation points Microsoft Employee
    2023-07-03T11:43:48.3366667+00:00

    @Sura Karthikeya

    Thank you for posting your question in Microsoft Q&A.

    Looks like the user is trying to access a resource from the tenant which is user is not part of.

    You can try the troubleshooting steps in below article,

    https://learn.microsoft.com/en-us/troubleshoot/azure/active-directory/error-code-aadsts50020-user-account-identity-provider-does-not-exist

    If this doesn't solve the issue you we can work on this offline.

    Please send us an email on azcommunity [at] microsoft [dot] com with Sub - Attn: Sandeg and following details in the email body:

    Link to this thread/post

    We can connect offline and discuss further on this.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.