Admin unable to log into Teams and Authenticator app

Question

Admin unable to log into Teams and Authenticator app

GHart 0

Hi,

Our admin has been unable to login to his Teams account and Authenticator app and receives the below message:

Request Id: b79e47b2-0d42-404c-ad0d-915969cdd600

Correlation Id: aa09e964-5e10-4557-8540-48a8be242974

Timestamp: 2023-12-16T16:41:35Z

Message: AADSTS90072: User account '@.onmicrosoft.com' from identity provider 'https://sts.windows.net/90bc8679-f428-44fd-a391-b8cfcfe89bae/' does not exist in tenant '*****' and cannot access the application '0000000c-0000-0000-c000-000000000000'(Microsoft App Access Panel) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account

What can be done to fix this?

Thank you.

JimmyYang-MSFT 58,641 Reputation points Microsoft External Staff

2023-12-18T07:27:06.6433333+00:00
@GHart

Could you login in Teams web client normally?

Based on my reserch, there are two factors could cause this issue:

Account doesn’t exist in the tenant – if the external account that the user is trying to sign in with doesn’t exist on the tenant that they signed into, it can prompt the error. Also, it is because the user can’t satisfy the MFA (Multi-factor authentication) requirements for the tenant, making it unauthorized.

There is a mismatch in the ImmutableID attribute – The error can also occur if there is a mismatch in the ImmutableID (sourceAnchor) attribute between Active Directory and Azure AD regardless of the users being synced.

For more details about its discussion, you could read:

https://windowsreport.com/aadsts90072/

Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.
JimmyYang-MSFT 58,641 Reputation points Microsoft External Staff

2023-12-26T07:39:47.7633333+00:00

@GHart

It has been a while, how is everything going?

If you have any update about this issue, please feel free to post back.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

1 answer

Your answer

JimmyYang-MSFT 58,641 Reputation points Microsoft External Staff

2023-12-18T07:27:06.6433333+00:00

@GHart

Could you login in Teams web client normally?

Based on my reserch, there are two factors could cause this issue:

Account doesn’t exist in the tenant – if the external account that the user is trying to sign in with doesn’t exist on the tenant that they signed into, it can prompt the error. Also, it is because the user can’t satisfy the MFA (Multi-factor authentication) requirements for the tenant, making it unauthorized.

There is a mismatch in the ImmutableID attribute – The error can also occur if there is a mismatch in the ImmutableID (sourceAnchor) attribute between Active Directory and Azure AD regardless of the users being synced.

For more details about its discussion, you could read:

https://windowsreport.com/aadsts90072/

Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.
JimmyYang-MSFT 58,641 Reputation points Microsoft External Staff

2023-12-26T07:39:47.7633333+00:00

@GHart

It has been a while, how is everything going?

If you have any update about this issue, please feel free to post back.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Answer 1

Anonymous

Sounds like you'll need the account admins to reset the account so a new QR code can be generated with which you can relink the authentication device to your account.

If you are the admin (and blocked) then you can reach out to 365 global customer service here.
https://support.microsoft.com/en-us/topic/global-customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2

--please don't forget to close up the thread here by marking answer if the reply is helpful--

Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Anonymous

2023-12-19T13:01:21.9933333+00:00

Just checking if there's any progress or updates?

--please don't forget to close up the thread here by marking answer if the reply is helpful--

Share via

Admin unable to log into Teams and Authenticator app

1 answer

Your answer