Cannot access Azure AD

Question

I'm opening this and see this error.

{
  "sessionId": "d82a220498774539b10683d9f8af4b28",
  "errors": [
    {
      "errorMessage": "interaction_required: AADSTS16000:
 User account '{EmailHidden}' from identity provider 'live.com' 
does not exist in tenant 'Microsoft Services' a
nd cannot access the application '74658136-14ec-4630-ad9b-26e160ff0fc6'(ADIbizaUX) in that tenant. 
The account needs to be added as an external 
user in the tenant first. Sign out and sign 
in again with a different Azure Active Directory 
user account.

Trace ID: d0d236b1-f2b1-45b0-bef1-e6d62a953e00

Correlation ID: f97ccbec-145e-4a5e-8e38-c0dd1e85924b
Timestamp: 2023-08-15 13:06:54Z",
      "clientId": "74658136-14ec-4630-ad9b-26e160ff0fc6",
      "scopes": [
        "a57aca87-cbc0-4f3c-8b9e-dc095fdc8978/.default"
      ]
    }
  ]
}

And when I try to log in 

AADSTS50020: User account '******@interia.pl' from identity
 provider 'live.com' does not exist in tenant 'Microsoft Services'
 and cannot access the application 'f9885e6e-6f74-46b3-b595-
350157a27541'(Microsoft_AAD_UsersAndTenants) in 
that tenant. The account needs to be added as an external 
user in the tenant first. Sign out and sign 
in again with a different Azure Active Directory user account.

how to add myself to microsoft tenant azure active directory services as external-whatever-it-is?

Answer 1

Hi @Wojciech Sobiesiak ,

Thanks for reaching out.

Azure AD error codes AADSTS16000 is thrown when the user not found in the tenant used for authentication.

The error AADSTS50020: User account '{EmailHidden}' from identity provider 'live.com' does not exist in tenant 'Microsoft Services' usually occurs when you sign in to Azure Portal using your personal account which is not added as an external/guest user to an Azure AD tenant.

Since you are connected to the Microsoft Services tenant as a standard user with restricted access, you cannot perform actions such as creating new users, groups, enterprise applications, and so on. To perform administrative actions, you must have administrative access to the tenant.

For this purpose, you need to create your own tenant. When you create a new tenant, you by default become the Global Administrator of the new tenant and have full access to all the options in that tenant.

To create a new tenant, open in-private/incognito browser window (just to avoid SSO), access https://azure.microsoft.com/en-us/free/ to create a free Azure account.

Once the new account is created, you should be able to see and switch to the new tenant by clicking on the settings icon as highlighted below:

Alternatively, you can ask the global administrator or any existing Azure AD tenant to invite you as a guest user as mentioned here: https://docs.microsoft.com/en-us/azure/active-directory/external-identities/add-users-administrator#add-guest-users-to-the-directory. Once you are added to an azure tenant and you accept the invite sent to you via email, you can use https://portal.azure.com/#create/Microsoft.AzureActiveDirectory URL to create your own tenant as well.

Hope this will help.

Thanks,

Shweta

---

Please remember to "Accept Answer" if answer helped you.