User invitation link return AADSTS500208: The domain is not a valid login domain for the account type

Question

I sent an invitation as an external user to register a colleague in my app, and when he clicks get this error

AADSTS500208: The domain is not a valid login domain for the account type. Trace ID: 2755e899-999c-435a-ba43-dfea21cf0000 Correlation ID: 80f33010-235a-4b1a-bfc4-88c14e374fe3 Timestamp: 2024-02-03 12:13:43Z

Answer 1

Hello @Leon Cangini

The error AADSTS500208: The domain is not a valid login domain for the account type typically occurs when the user’s account does not match the expected account type for the given tenant.

Here are a few things you could try:

1. Ensure that the user is signing in with an account that exists on the same tenant where the application is registered.
2. If the user is an external user, you might need to invite them as a Guest to your Azure AD tenant.
3. Check the authority you’re using in your application. For example, if you’re using login.microsoftonline.com/{tenantId}, ensure that the user has the necessary role (like Global Administrator). If the user doesn’t have the role, it might return the error.
4. If you’re using {tenantName}.ciamlogin.com, ensure that it prompts for AD accounts.

If these steps don’t resolve the issue, please provide more details about your setup (like the type of accounts you’re using, the tenant setup, etc.), and I’ll do my best to assist you further. Does this answer your question?

Answer 2

Hi,

This situation occurs when the user's account does not match the expected account type for the given tenant. For instance, if the tenant is configured to allow only work or school accounts, and the user tries to sign in with a personal Microsoft account, they will receive this error. Check the user is using correct account also try in incognito mode in the browser.

Hope this helps. JS

== Please Accept the answer if the information helped you. This will help us and others in the community as well.