Hi, I am trying to create a new tenant and new account to log into admin.microsoft.com and even portal.azure.com. Both are giving me errors like my account is not found or that there is some error getting some authentication token. And I can't even raise a support request. It seems to suggest that there is an error creating a tenant or finding a tenant associated with the account.

Hello PT, Thank you for contacting the Microsoft Q&A community support. Based on the error in the screenshot above, the user account you are authenticating with seems to be a personal account and doesn't have permission to access the tenant. Also, be sure you are authenticating against against the right tenant NB: A personal or guest account cannot be used to access the admin.microsoft.com blade. If you just created the tenant with the email address and you are trying to access the Azure portal via portal.azure.com, check if you are authenticating against the right tenant by using the URL "portal.azure.com/yourtenantid". This will allow you to force the authentication against the tenant. Once you are in the portal, then create an Azure Account from the portal, assign an admin role, and use this account to authenticate to the admin portal. This is only if you are sure the tenant has been successfully created. Also, I would advise you to sign in using an incognito tab to be sure you are authenticating to the right account. Let me know if further assistance is required

I keep getting errors with authentication token and log in

Accepted answer

Babafemi Bulugbe 3,705 Reputation points MVP

2024-03-23T06:06:43.2266667+00:00

Hello PT,

Thank you for contacting the Microsoft Q&A community support.

Based on the error in the screenshot above, the user account you are authenticating with seems to be a personal account and doesn't have permission to access the tenant. Also, be sure you are authenticating against against the right tenant

NB: A personal or guest account cannot be used to access the admin.microsoft.com blade.

If you just created the tenant with the email address and you are trying to access the Azure portal via portal.azure.com, check if you are authenticating against the right tenant by using the URL "portal.azure.com/yourtenantid". This will allow you to force the authentication against the tenant. Once you are in the portal, then create an Azure Account from the portal, assign an admin role, and use this account to authenticate to the admin portal. This is only if you are sure the tenant has been successfully created.

Also, I would advise you to sign in using an incognito tab to be sure you are authenticating to the right account.

Let me know if further assistance is required
Please sign in to rate this answer.
PT 20 Reputation points

2024-03-23T06:18:16.1366667+00:00

I am a bit confused. When I first create an account in admin.microsoft.com, I was able to create the login. How come it became a live account?

Now when I log in admin.microsoft.com, I used the same account and I get the following error:
Selected user account does not exist in tenant 'Microsoft Services' and cannot access the application '7465xxxxx' in that tenant. The account needs to be added as an external user in the tenant first. Please use a different account.

PT 20 Reputation points

2024-03-23T06:25:17.9933333+00:00

I am confused. I was able to create an account on admin.microsoft.com, but when I tried to log in, I get the following error

Selected user account does not exist in tenant 'Microsoft Services' and cannot access the application '74xxxx' in that tenant. The account needs to be added as an external user in the tenant first. Please use a different account.

On Azure, I followed the portal.azure.com/yourtenantid to log in, and I was able to get the following screen. But immediately after that, I get the authentication error.

Babafemi Bulugbe 3,705 Reputation points MVP

2024-03-23T06:50:50.9533333+00:00

This indicates that the tenant is not created yet. It's only showing because there is another Microsoft service linked to that account. This may be because you created the account on the admin portal as you said. However, personal or guest accounts cannot be used to access the admin portal (admin.microsoft.com).

To resolve this, create a new account using the email by accessing the portal.azure.com in an Inprivate tab, then click create one.

Once you have completed the creation, go ahead to create a Microsoft Entra ID user in the portal, assign a global admin role to the user, and access the admin portal with this user.

Let me know if this helps.

PT 20 Reputation points

2024-03-23T06:59:26.39+00:00

Does that mean that when I create a new account on admin.microsoft.com, it will create a live account?

PT 20 Reputation points

2024-03-23T07:13:37.33+00:00

I tried to create a new account on azure. It now says that xxx@xxxx.com is already a Microsoft account. Please try a different email address.

Babafemi Bulugbe 3,705 Reputation points MVP

2024-03-23T07:17:31.79+00:00

When creating an account on admin.microsoft.com or portal.azure.com, you will notice that you are being redirected to signup.live.com and not the microsoftonline.com because the account you are signing up with doesn't exist in any azure organization yet.

Any account created outside the Azure or M365 tenant is personal or live account. Account such as *.google.com or even a custom email created on third party domain provider. Although after creation of the Azure tenant with this account user type will be member, doesn't still leave the fact that they were created outside the Microsoft environment.

Let me know if further assistance or clarification is needed.

Please do accept the answer if this helps.

Babafemi Bulugbe 3,705 Reputation points MVP

2024-03-23T07:20:12.0666667+00:00

Ok then, use the url azure.microsoft.com/free to sign up

PT 20 Reputation points

2024-03-23T08:38:59.87+00:00

I managed to use azure.microsoft.com/free to sign up and create an tenant.
But I still can't log in admin.microsoft.com because Azure free subscription does not allow me to create a tenant for my domain.
As a result when I sign into admin.microsoft.com, it says that "xxx@domain.com isn't in our system. Make sure you typed it correctly"

Babafemi Bulugbe 3,705 Reputation points MVP

2024-03-23T08:49:45.75+00:00

After creating the tenant, you need to create a new user in that tenant who will be a member of the organization. Assign an admin role to this user and authenticate to the admin portal using this particular user.

I believe you are still trying to sign in to the admin portal using the same account that created the tenant which is the reason you are facing this issue

Let me know if this helps.

PT 20 Reputation points

2024-03-23T09:01:31.4466667+00:00

But if I am the user that create the tenant, shouldn't I be the global admin? I check the role assignment and indeed I am the global admin.
The only other reason I can think of is that the primary domain is still .onmicrosoft.com and not my organization domain xxx.com. So do I have to get a paid subscription to create a tenant with primary domain as xxx.com, so that I can log in to admin.microsoft.com? This logic is a bit strange because the whole point of logging into admin.microsoft.com is for me to purchase license for my organization.
I am just confused about the whole flow.

Babafemi Bulugbe 3,705 Reputation points MVP

2024-03-23T09:11:44.5133333+00:00

Let me explain this

The user that created the tenant is still more of an external account since the user email wasn't created within the Azure or M365 environment. If you check the user creation type, it will surely be Email verified.

NB: External accounts cannot be used to access the admin portal even though they are Global Administrators in the tenant.

To access the Admin Portal, you need a work or school account (which is an account created in the Microsoft Entra ID tenant or Azure Tenant as it was called before).

Hence, the reason I asked you to create a new user within this tenant and use this account to manage the admin portal.

However, once your custom domain is verified in the tenant you will be able to use your account since you will have two different accounts to choose from when you want to authenticate. You will have the option to choose from a work account and a guest account. See below screenshot

Let me know if this helps

PT 20 Reputation points

2024-03-23T10:04:29.45+00:00

Yes! Definitely help. It is all good now.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

I keep getting errors with authentication token and log in

0 additional answers

Your answer