Lost access to DevOps organization

Question

Lost access to DevOps organization

Sjur Varhaug 5

I tried to connect to a DevOps repository during Azure Static Web Apps setup. When it came to the branch dropdown I didn't see any branches. After that I can no longer access my Azure DevOps organization. I am the org Owner via MSA, and my Entra ID identity is a B2B external member. I am getting 401 and on https://aex.dev.azure.com/ when expanding my organization I only see a spinner animation. Note that I have a work account and a MSA with the same e-mail address which might be relevant?

Praveen Kumar Gudipudi 2,290 Reputation points Microsoft External Staff Moderator

2026-03-01T01:34:13.55+00:00
Hello Sjur Varhaug,

Contact your Azure DevOps administrator to verify your identity appears in the organization's Users list.

For Microsoft Entra accounts: Ensure the identity in the Users list exactly matches your UPN in the Microsoft Entra tenant.

For personal Microsoft accounts: Confirm the identity matches your primary account email.

For B2B guests: Verify your UPN in the guest tenant matches your home tenant UPN, including exact casing.

401 - Not Authorized errorsPlease accept as answer and do a Thumbs-up to upvote this response if you are satisfied with the community help. Your upvote will be beneficial for the community users facing similar issues.
Sjur Varhaug 5 Reputation points

2026-03-01T16:46:39.8633333+00:00

I am the DevOps Administrator using my personal Microsoft account. Ref answer in the last comment; it appears the org have been unintentionally connected to an Entra ID tenant during Azure Static Web Apps setup.
Praveen Kumar Gudipudi 2,290 Reputation points Microsoft External Staff Moderator

2026-03-04T08:02:12.4233333+00:00

Hello Sjur Varhaug,

Please try below suggested options:

Option 1 – Access via the Tenant Identity (Most Likely to Work)

Sign out of all Microsoft sessions completely.

Open an InPrivate/Incognito browser.

Sign in explicitly using the work/Entra account (not MSA).

Try accessing:

https://dev.azure.com/{yourorg}

If successful:

Go to Organization Settings → Users

Ensure your MSA is re-added properly

Confirm which identity is set as Organization Owner

Option 2 – Verify Organization Tenant Connection

If someone else has Global Admin access to the Entra tenant:

Ask them to check:

Azure Portal → Microsoft Entra ID → Enterprise Applications

Verify Azure DevOps enterprise app assignment

Confirm your account exists and is not blocked

1 answer

Your answer

Praveen Kumar Gudipudi 2,290 Reputation points Microsoft External Staff Moderator

2026-03-01T01:34:13.55+00:00

Hello Sjur Varhaug,

Contact your Azure DevOps administrator to verify your identity appears in the organization's Users list.

For Microsoft Entra accounts: Ensure the identity in the Users list exactly matches your UPN in the Microsoft Entra tenant.

For personal Microsoft accounts: Confirm the identity matches your primary account email.

For B2B guests: Verify your UPN in the guest tenant matches your home tenant UPN, including exact casing.

401 - Not Authorized errorsPlease accept as answer and do a Thumbs-up to upvote this response if you are satisfied with the community help. Your upvote will be beneficial for the community users facing similar issues.
Sjur Varhaug 5 Reputation points

2026-03-01T16:46:39.8633333+00:00

I am the DevOps Administrator using my personal Microsoft account. Ref answer in the last comment; it appears the org have been unintentionally connected to an Entra ID tenant during Azure Static Web Apps setup.
Praveen Kumar Gudipudi 2,290 Reputation points Microsoft External Staff Moderator

2026-03-04T08:02:12.4233333+00:00

Hello Sjur Varhaug,

Please try below suggested options:

Option 1 – Access via the Tenant Identity (Most Likely to Work)

Sign out of all Microsoft sessions completely.

Open an InPrivate/Incognito browser.

Sign in explicitly using the work/Entra account (not MSA).

Try accessing:

https://dev.azure.com/{yourorg}

If successful:

Go to Organization Settings → Users

Ensure your MSA is re-added properly

Confirm which identity is set as Organization Owner

Option 2 – Verify Organization Tenant Connection

If someone else has Global Admin access to the Entra tenant:

Ask them to check:

Azure Portal → Microsoft Entra ID → Enterprise Applications

Verify Azure DevOps enterprise app assignment

Confirm your account exists and is not blocked

Answer 1

kagiyama yutaka 3,605

I think that DevOps is mixin up ur MSA n that B2B ident, so the org bind on aex just falls into 401 n spins. log out both idents n clear only the dev.azure.com/aex cookies, then sign in with the MSA that owns the org and that’s the one door still open for u. if the org doesn’t show right away, peek again… stale binds hide it on the first load, happens more than u’d think.

Sjur Varhaug 5 Reputation points

2026-03-01T16:37:35.27+00:00
I have tried every possible suggestion, from clearing all cookies, signing in using inprivate window etc. What might be relevant is that I see a message like this in the console when opening https://aex.dev.azure.com/

TF401444: Please sign-in at least once as Windows Live ID\************* in a web browser to enable access to the service.

My best guess based on research with AI is that

the org appears to have been unintentionally connected to an Entra ID tenant during Azure Static Web Apps setup

My MSA is represented as a B2B external user (#EXT#) in that tenant

And that I need either the tenant disconnected from the org, or the identity mapping manually completed

I use the same identity to connect to other orgs in devops, so there is no issue with the identity, and in https://aex.dev.azure.com/ I am listed as Owner of the org I cannot connect to.
kagiyama yutaka 3,605 Reputation points

2026-03-01T19:06:32.86+00:00

that TF401444 just means aex never got a clean MSA token, it’s not a tenant or #EXT# thing. clear only the dev.azure.com/aex cookies n land one fresh sign‑in with the pure MSA.
Sjur Varhaug 5 Reputation points

2026-03-02T18:31:06.7266667+00:00

I have tried this, even with different browsers and computers. I have another user with limited access to the organization who was able to inspect the network traffic. When calling the MemberEntitlements API, my user account shows a corrupted principalName in the format:

AccountNameConflict_[GUID]_[my email address]

This probably confirms that during the Static Web Apps authorization flow, an identity conflict was created between my original MSA-based DevOps identity and my B2B external identity in the Entra ID tenant. DevOps was unable to reconcile these two identities and placed my account into a conflict state, which prevents authentication.

My best guess is that I need support to remap my identity back to my original MSA?
kagiyama yutaka 3,605 Reputation points

2026-03-04T10:03:44.7233333+00:00

yeah… that AccountNameConflict_ means DevOps already broke the link between your MSA and the B2B copy. once it hits that state, nothing client‑side will fix it and support has to remap it back to the real MSA.
Sjur Varhaug 5 Reputation points

2026-03-05T00:34:57.6833333+00:00

How do I get in touch with support? I'm having trouble finding the right channel.
kagiyama yutaka 3,605 Reputation points

2026-03-05T00:54:23.7733333+00:00

Hi Sjur u can reach support by opening the Azure Portal, selecting “Help + support,” and creating a new support request for Azure DevOps.

Share via

Lost access to DevOps organization

1 answer

Your answer