Need help identifying admin access for Microsoft Entra External ID / CIAM tenant app registration

Question

Title:

Need help identifying admin access path for Microsoft Entra External ID / CIAM tenant app registration

Details:

Hello Microsoft Community,

We need guidance on how to identify or recover the correct admin access path for an existing Microsoft Entra External ID / CIAM tenant.

Our application uses this Microsoft CIAM login domain:

uhuruppm.ciamlogin.com

Tenant ID:

7a088908-e434-xxxx-xxxx-189294f297c5

Application/client ID:

a9df5d6b-2b50-xxxx-xxxx-882c1033c7c0

We are setting up a staging environment:

https://staging.uhuruppm.com

Login/signup is currently blocked by this error:

AADSTS50011

The redirect/callback URL that needs to be added is:

https://staging.uhuruppm.com/callback

The issue is that this CIAM tenant/app registration is not visible from our normal dillonmorgan.com Azure directory. We can see the normal Azure subscription/resources, but we cannot find the app registration where this callback URL must be configured.

We are not trying to create a new app registration. We need to update the existing app registration used by production.

Questions:

What role is required to manage the app registration inside a Microsoft Entra External ID / CIAM tenant?

Can an Azure subscription Owner or Contributor access this CIAM tenant automatically, or does the account need a separate Entra role?

How can we identify which account currently has admin access to this CIAM tenant?

How can we identify who currently owns or can manage the app registration with this client ID?

If no current team member can see the CIAM tenant, what is the recommended recovery or official support path?

We do not need any secret values. We only need guidance on the correct admin/access path so we can add the staging callback URL and continue testing.