AADSTS500200:

Question

AADSTS500200:

Pankaj Rai 0

AADSTS500200: User account '******@outlook.com' is a personal Microsoft account. Personal Microsoft accounts are not supported for this application unless explicitly invited to an organization. Try signing out and signing back in with an organizational account.
i want to authenticate oauth2 and i am also choose Supported account types based on your requirements (e.g., "Accounts in any organizational directory (Any Azure AD directory - Multitenant)" for both work/school and personal Microsoft accounts).
in my manifest signInAudience show "AzureADandPersonalMicrosoftAccount" in json format
but i am not understand where i am wrong

Shweta Mathur 30,461 Reputation points Microsoft Employee Moderator

2023-09-18T07:39:17.49+00:00

Hi @Pankaj Rai ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

1 answer

Your answer

Shweta Mathur 30,461 Reputation points Microsoft Employee Moderator

2023-09-18T07:39:17.49+00:00

Hi @Pankaj Rai ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Answer 1

Hi @Pankaj Rai ,

The error AADSTS50020: User account '{EmailHidden}' from identity provider 'live.com' does not exist in tenant 'Microsoft Services' usually occurs when you sign in to Azure Portal using your personal account which is not added as an external/guest user to an Azure AD tenant. Due to this, you by default get connected to the Microsoft Services tenant.

Since you are connected to the Microsoft Services tenant as a standard user with restricted access, you cannot perform actions such as creating new users, groups, enterprise applications, and so on. To perform administrative actions, you must have administrative access to the tenant.

For this purpose, you need to create your own tenant rather than using the Microsoft Services tenant. When you create a new tenant, you by default become the Global Administrator of the new tenant and have full access to all the options in that tenant.

To create a new tenant, open in-private/incognito browser window (just to avoid SSO), access https://azure.microsoft.com/en-us/free/ to create a free Azure account.

Once the new account is created, you should be able to see and switch to the new tenant by clicking on the settings icon as highlighted below:

Alternatively, you can ask the global administrator or any existing Azure AD tenant to invite you as a guest user as mentioned here: https://docs.microsoft.com/en-us/azure/active-directory/external-identities/add-users-administrator#add-guest-users-to-the-directory. Once you are added to an azure tenant and you accept the invite sent to you via email, you can use https://portal.azure.com/#create/Microsoft.AzureActiveDirectory URL to create your own tenant as well.

Hope this will help.

Thanks,

Shweta

Please remember to "Accept Answer" if answer helped you.