A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
The error means the Samsung startup flow is using an app or endpoint that only accepts work or school (organizational) accounts, but the account being used is a personal Microsoft account (Outlook/Hotmail). Personal accounts are blocked for that application unless the app is configured to allow them.
To fix the problem, use one of these options:
- Use a work/school account instead of the personal account
The app that is prompting for sign-in is configured for organizational accounts only. If there is a Microsoft 365 work/school account available, sign in with that account at startup. - Skip or remove the organizational sign-in during phone setup
On the Samsung startup wizard, look for options such as:- “Skip” or “Not now” on any screen that mentions work/school, Microsoft 365, or device management.
- Avoid choosing options like “Sign in with a work or school account” or “Set up device management.”
Then, after setup completes, add the personal Microsoft account only where personal accounts are supported (for example, Outlook mobile, Microsoft Authenticator backup, or other consumer apps).
- If this is an app being developed or configured (developer/admin scenario)
The error AADSTS500200 is caused by using an endpoint or app configuration that does not allow personal accounts. For an app that should support personal accounts, configure it to use the correct sign-in URL/authority:- For multitenant + personal accounts apps, use
https://login.microsoftonline.com/common. - For personal accounts only, use
https://login.microsoftonline.com/consumers.
- For multitenant + personal accounts apps, use
If sign-in issues continue specifically in Outlook or Authenticator after the phone reset, reinstall the affected app and sign in again with the personal Microsoft account, or use the Microsoft account sign-in helper if the account itself cannot be accessed.
References: