Share via

Application was setup in Azure AD B2C with authentication allowed for all Microsoft users. When trying to access the application it is requesting that the user needs to be added to the tenant.

Vamsi Koganti 0 Reputation points
2024-06-18T18:10:02.6033333+00:00

I am using open id with application allowed for all identtities but getting error AADSTS50020: User account 'xxxxx@outlook.com' from identity provider 'live.com' does not exist in tenant 'xxxxxx' and cannot access the application '0ad2b089-sdfdf9'(IASTESTALLIDS) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,250 questions
0 comments

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. akinbade abiola 6,265 Reputation points
    2024-06-18T18:20:41.1033333+00:00

    Hello Vamsi Koganti,

    Thanks for your question.

    Please take a look at the quick guide below specifically for the issue:

    Error AADSTS50020 - User account from identity provider does not exist in tenant

    Regards,

    Abiola

    You can mark it 'Accept Answer' and upvote if this helped.

  2. James Hamil 22,891 Reputation points Microsoft Employee
    2024-06-18T20:30:38.04+00:00

    Hi @Vamsi Koganti , you'll need to invite the user to your tenant. Please let me know if you have any questions and I can help you further.

    If this answer helps you please mark "Accept Answer" so other users can reference it.

    Thank you,

    James

  3. Shweta Mathur 29,011 Reputation points Microsoft Employee
    2024-06-21T06:07:31.8133333+00:00

    Hi @Vamsi Koganti ,

    Thanks for reaching out.

    You are getting error due to configuration issues in your web application.

    The discovery URL you are using is of Entra ID rather than Azure AD B2C https://login.microsoftonline.com/common/v2.0/.well-known/openid-configuration

    With B2C open ID connect, you can allow any users to use sign up/sign in policy to register in your B2C tenant with discovery URL https://<tenantName>.b2clogin.com/<tenantName>.onmicrosoft.com/<B2C policy name>/v2.0/.well-known/openid-configurationTo setup Open ID configuration in your B2C tenant, refer https://learn.microsoft.com/en-us/azure/active-directory-b2c/openid-connect

    If that is not the scenario you are looking for, please explain the scenario so we can help you better.

    Hope this will help.

    Thanks,

    Shweta

    Please remember to "Accept Answer" if answer helped you.