Why can't our app access personal Microsoft account calendars outside the accounts of the tenant, despite all permissions, while it works fine with Tenant accounts? Are there specific limitations, and how can they be resolved?

Anil Reddy 0 Reputation points
2025-04-25T11:22:22.2566667+00:00

Request Id: eb2eed6e-7522-45e5-b50c-5c97d80b5600 Correlation Id: b5ede7dc-443b-419b-b77c-b70470af55d2 Timestamp: 2025-04-24T09:21:12Z Message: AADSTS50020: User account 'alr*ddy.fnelck*@outlook.com' from identity provider 'live.com' does not exist in tenant '****@Test.com' and cannot access the application 'e66a5095-19c8-40d9-9762-d30a38*****8'(Test) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Navya 20,490 Reputation points Microsoft External Staff Moderator
    2025-04-25T19:01:12.37+00:00

    HI @Anil Reddy

    I understand you're encountering the error AADSTS50020: User account does not exist in tenant when trying to access the application using personal accounts.

    This error can occur in several scenarios. Please review the steps below to troubleshoot:

    1.Check the app registration's supported account type If your app registration is set to single-tenant, users from other directories or identity providers will not be able to sign in. Ensure the app registration is configured as multi-tenant if you want to allow external users.

    2.Use the correct authentication endpoint If you're using https://login.microsoftonline.com/<YourTenantNameOrID>, only users from that tenant can access the app. For multi-tenant apps or apps that support personal Microsoft accounts, use the common endpoint: https://login.microsoftonline.com/common

    3.Check if the app requires user assignment If your enterprise application requires user assignment, users not explicitly assigned will receive the AADSTS50020 error. Make sure users are assigned access to the application either individually or via a group.

    4.Ensure the user is signed into the correct tenant/account Users might access the app via a direct link or through https://myapps.microsoft.com. In some cases, users may have an active session with a different account than intended (e.g., signed in with an organizational account instead of a personal account or vice versa). Check the User account and Identity provider values in the error message. Try signing out and signing in again using a different browser or an incognito/private session.

    Hope this helps. Do let us know if you any further queries.


    If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.