Share via

I can't login to to use Azure, "Interaction required" etc errors

NW 0 Reputation points
2026-03-02T17:13:48.8833333+00:00

I don't use Azure, I just need it for a WP plugin. I'm just trying to register an app so I can get a Client ID, Tenant ID, and Client Secret. So I go to portal.azure.com. I sign in with my Microsoft account. I get a popup error "Interaction required. The portal encountered an issue while attempting to retrieve access tokens. ... Additional details: interaction_required: AADSTS160021: Application requested a user session which does not exist..."
If I click sign-in again to takes me back to the login page but then I try to sign in and get this error: "Selected user account does not exist in tenant 'Microsoft Services' and cannot access the application '...' in that tenant. The account needs to be added as an external user in the tenant first. Please use a different account."
I can go back to portal.azure.com and appear to be logged in but then get that "Interaction required" error again.

I have tried logging out and back in, different browsers, private windows. I have no idea what any of this means. I don't know what a tenant is. I don't even know what to choose as the child Tag for this question.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} votes

2 answers

Sort by: Most helpful
  1. jmoyson 0 Reputation points
    2026-03-12T12:27:49.0133333+00:00

    I had to create a new tenant to resolve the issue. Here’s the link I used: https://azure.microsoft.com/en-us/free/

    PS: Had to go to Reddit to find the answer (and agree with most of the comments that say it's weird Microsoft can't just make a redirection when this happens ! or at least display a more informative message)

    0 comments No comments

  2. Q&A Assist
    2026-03-02T17:14:05.65+00:00
    AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

    The sign-in errors indicate issues with the Microsoft Entra tenant (directory) behind the account, not with the browser or device.

    Key points from the errors described:

    • interaction_required and Application requested a user session which does not exist indicate the portal cannot get valid tokens for the current tenant/session.
    • "Selected user account does not exist in tenant 'Microsoft Services' and cannot access the application" means the account is being evaluated against a tenant where it is not a member or guest.

    From similar Azure sign-in issues in the context, there are two main patterns and resolutions:

    1. Tenant is blocked or inaccessible
      When a tenant is blocked due to inactivity, sign-in can fail with interaction_required and AADSTS errors. In that case, the tenant admin must have the tenant reactivated by Microsoft support within the allowed window. The documented guidance is:
      • Administrators can request reactivation of an inactive tenant by contacting Microsoft using the global support phone numbers.
      • Avoid opening multiple support requests for the same issue while one is in progress.
      • As a workaround to reach the correct tenant, sign in directly with the tenant identifier in the portal URL, for example:
        • https://portal.azure.com/<TenantId>
        • or https://portal.azure.com/<yourTenantName>.onmicrosoft.com
      If the tenant is already in a blocked/inactive state, it must be reactivated by Microsoft before normal portal use (including app registration) will work.
    2. Account vs. tenant mismatch
      The error stating the selected user account does not exist in the Microsoft Services tenant means the sign-in is being evaluated against a tenant where the account is not present. To proceed, either:
      • Use the correct tenant where the account is actually a member (for example, by using the tenant-specific portal URL as above), or
      • Have the account added as an external (guest) user in the target tenant if that tenant is where the app must be registered.

    If the account is only a personal Microsoft account and there is no active Azure tenant associated with it, or the tenant is blocked, then to obtain Client ID, Tenant ID, and Client Secret for a plugin, one of the following is required:

    • Reactivate the existing tenant via Microsoft support (if it is blocked/inactive and within the reactivation window), then register the app.
    • Or create/associate a new tenant that is active, then sign in to that tenant in the Azure portal and register the app there.

    In all cases, the underlying requirement is an active Microsoft Entra tenant where the account is a member or guest; without that, app registration for Azure-based authentication cannot proceed.


    References:


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.