Share via

External Identities / Cross-tenant log-in error (Selected user account does not exist in tenant 'xyz' and cannot access the application 'uuid' in that tenant. The account needs to be added as an external user in the tenant first.)

Alexander 0 Reputation points
2026-02-16T08:31:30.9033333+00:00

Hello,

I'm the admin of two (test) Entra ID tenants. One of the tenants, lets call it MAIN has a single tenant application registered. All my users can log in and access this app. I would like to also allow users from a different tenant, lets call it PARTNER to access my application.

At the moment users form the PARTNER tenant get the following error after log-in:
Selected user account does not exist in tenant 'xyz' and cannot access the application 'uuid' in that tenant. The account needs to be added as an external user in the tenant first. Please use a different account.

What do I have to change/configure that users from the PARTNER tenant can access may app?
Limitations:

  • I cannot change the application, it supports only a single tenant because of library limitations.
  • The PARTNER tenant will have thousands of users, inviting all of them is not feasible.

Update:
When I invite a user from the PARTNER tenant it works. Do I need a license with "Cross-tenant synchronization" to get it working without manual invitation?

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
0 comments No comments
{count} votes

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.