Share via

I created a corporate account for Azure but I am not able to login

Trialpay Admin 0 Reputation points
2026-03-25T21:21:32.8166667+00:00

When I login with my corporate account I get the following problem. I would like to login to the azure portal

Sorry, but we’re having trouble signing you in.

AADSTS50020: User account '*** * * * * from identity provider 'live.com' does not exist in tenant 'Microsoft Services' and cannot access the application 'e6694c91-1590-4e35-9bb7-b865c638b9c1'(Microsoft_Azure_SupportPortalExtension) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account.

Microsoft Security | Microsoft Entra | Microsoft Entra ID

1 answer

Sort by: Most helpful
  1. Q&A Assist
    2026-03-25T21:21:52.4966667+00:00
    AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

    The error indicates that the account used to sign in (... from identity provider live.com, a personal Microsoft account) does not exist in the Microsoft Entra tenant that backs the “Microsoft Services” directory and therefore cannot access the Azure Support Portal application in that tenant.

    From the error text and documented causes, there are three main possibilities and corresponding fixes:

    1. Wrong endpoint for the account type
      • The sign-in is being performed as if it were an organizational (work/school) account in a specific tenant, but the identity provider is live.com (personal Microsoft account).
      • If the Azure AD app is configured for organizational accounts only, a live.com account cannot be used unless it is added as a guest.
      • If developing or configuring an app, ensure the correct authority URL is used for the supported account type:
        • Multitenant org-only: https://login.microsoftonline.com/organizations
        • Multitenant + personal: https://login.microsoftonline.com/common
        • Personal only: https://login.microsoftonline.com/consumers
      • For portal access, use the correct work/school account associated with the Azure tenant instead of the live.com account.
    2. Signed in to the wrong tenant / wrong session
      • The browser session is currently authenticated with a different account (for example, a personal live.com account) than the intended corporate Azure AD account.
      • Action:
        1. Sign out of all Microsoft accounts in the browser.
        2. Open a new InPrivate/Incognito window.
        3. Browse to the Azure portal and sign in explicitly with the corporate (work) account that belongs to the Azure tenant, not the live.com account.
      • Verify in the error details that User account and Identity provider match the intended combination (corporate account should show the organization’s identity provider, not live.com).
    3. Account not present in the tenant (guest not invited)
      • The live.com account truly does not exist in the “Microsoft Services” tenant.
      • If the intention is to use that personal account as a guest in that tenant, a tenant admin must first invite it as a guest user, following the standard B2B invitation process. Until invited, the account cannot access apps in that tenant.

    To proceed with Azure portal access as a “corporate account”:

    • Use the actual organizational account that belongs to the Azure tenant (not the live.com personal account), or
    • Ask an admin of the target tenant to invite the live.com account as a guest if that is the intended access pattern, then sign in again after the invitation is accepted, ensuring a clean/private browser session.

    References:

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.