AADSTS500200 Error with Azure Trusted Signing Using Free Azure Account

Deepak Bisht 0

Hello Microsoft Support Team,

I am currently attempting to use Azure Trusted Signing to sign an executable file using SignTool. I am consistently encountering the following error during the signing process:

AADSTS500200: User account 'support@my-domain-name-exist-here.com' is a personal Microsoft account. Personal Microsoft accounts are not supported for this application unless explicitly invited to an organization. Try signing out and signing back in with an organizational account.

Details:

Azure Account Type: Free Azure Account

Account Type: My email (support@my-domain-name-exist-here.com) is currently recognized as a personal Microsoft account.

Tenant: I am using the Default Directory in Microsoft Entra ID (formerly Azure Active Directory).

Actions Taken So Far:

Invited my personal Microsoft account (support@my-domain-name-exist-here.com) as a Guest user to my Azure AD tenant.

  Tried logging in multiple times using **Incognito mode** and **signed out** of all existing sessions to avoid session conflicts.
  
     Despite these efforts, I still get the **AADSTS500200** error when attempting the signing process.

My Goals:

I need to sign an executable file using SignTool with a Trusted Signing certificate I have set up in Azure.

I would like guidance on how to configure my account so it is accepted during the authentication process required by SignTool for trusted signing.

Request Id: 24d3013a-e576-4f8d-90b4-358a2e1fda00

Correlation Id: 34e57a51-14f3-4c96-8443-97a621d8a14f

Timestamp: 2024-11-25T17:31:01Z

Message: AADSTS500200: User account 'support@my-domain-name-exist-here.com' is a personal Microsoft account. Personal Microsoft accounts are not supported for this application unless explicitly invited to an organization. Try signing out and signing back in with an organizational account.

Thank you very much for your assistance. I am looking forward to your guidance to resolve this issue, as it is currently blocking my progress with signing my executable file using Azure Trusted Signing.

Best regards,

Deepak Bisht

Sina Salam 13,376 Reputation points

2024-11-26T14:38:47.36+00:00
Hello Deepak Bisht,

Welcome to the Microsoft Q&A and thank you for posting your questions here.

I understand that you are experiencing AADSTS500200 Error with Azure Trusted Signing Using Free Azure Account.

Azure Trusted Signing requires an organizational account. Since your current account is identified as a personal Microsoft account, you need to switch to an organizational account. If you don't have one, you can create a new organizational account.

Make sure your organizational account is invited to your Azure AD tenant. You can do this by going to the Azure portal, selecting your directory, and inviting the organizational account as a guest.

Ensure you are logged into the correct directory in the Azure portal. You can change directories by clicking on your account in the top right corner and selecting Switch directory.

Verify that the Trusted Signing resource provider is registered in your Azure subscription. Navigate to your subscription in the Azure portal, select "Resource providers," and register Microsoft.CodeSigning.

Ensure your organizational account has the required roles assigned. You need the Trusted Signing Certificate Profile Signer role to sign executables.

Sometimes, using the Azure CLI for authentication can resolve issues. You can disable other authentication methods and use only the Azure CLI by running the following command:
{ "ExcludeCredentials": [ "ManagedIdentityCredential", "EnvironmentCredential", "WorkloadIdentityCredential", "SharedTokenCacheCredential", "VisualStudioCredential", "VisualStudioCodeCredential", "AzurePowerShellCredential", "AzureDeveloperCliCredential", "InteractiveBrowserCredential" ] }

Make sure the endpoint and metadata in your JSON configuration file match the details of your Trusted Signing account and certificate profile.

If you prefer to use your existing personal account, you can convert it to an organizational account by associating it with a domain you own and managing it through Azure AD.

If the issue persists, consider contacting Microsoft Support from your Azure Portal, this might require a paid subscription as they can provide more detailed troubleshooting based on your specific setup.

I hope this is helpful! Do not hesitate to let me know if you have any other questions.
Givary-MSFT 34,286 Reputation points Microsoft Employee

2024-12-02T06:20:46.3133333+00:00

@Deepak Bisht Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back.

Share via

AADSTS500200 Error with Azure Trusted Signing Using Free Azure Account

Your answer