How to fix Microsoft Error

Question

I am trying to sign into ddt.ford.com. I get greeted with this

AADSTS50020: User account '******@reiselman.com' from identity provider 'live.com' does not exist in tenant 'azureford' and cannot access the application '2b4ef2b7-26fb-48b0-a2a4-39e529e8b484'(api-reg-DeliveryDayToolUI-prod Consumer) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account.

Answer 1

Hello Willis Oothout,

Greetings! Thanks for raising this question in the Q&A forum.

This error means the email address you are signing in with, ******@reiselman.com, has not yet been added as a guest (external) user inside Ford's Microsoft Entra ID tenant named azureford. The application at ddt.ford.com is set up to only allow accounts that already exist in that tenant, either as members or as invited guests, and your account is not currently in either category, so Entra rejects the sign-in before it ever reaches the application.

1. Confirm which email you were told to use

Reach out to whoever at Ford set up your access to ddt.ford.com (your Ford business contact, supplier portal admin, or the DDT tool owner) and confirm the exact email address they intended to grant you access with. It's common for this error to appear simply because someone tried to sign in with a slightly different email or an old account than the one that was actually invited.

1. Ask Ford to send or resend the B2B guest invitation

Since reiselman.com is your own organization's domain and Ford's tenant is azureford, someone with admin rights inside Ford's tenant needs to invite '******@reiselman.com' as an external (guest) user before you can access the application. This is not something you can do yourself from the reiselman.com side. If they already sent an invite, ask them to check whether it was actually redeemed, since an unredeemed or expired invite will produce this same error.

1. Check whether you are being asked to accept an invite email

Look in your reiselman.com inbox (including junk or quarantine) for a "You've been invited to Ford" or similar Microsoft invitation email tied to this address. If you find one, open it and complete the redemption steps before trying ddt.ford.com again. If Ford confirms they sent an invite but you never received it, ask them to resend it.

1. Sign out of any existing Microsoft session first

Since the error references identity provider live.com, it's possible your browser already has an active Microsoft session signed in with a personal Microsoft account. Fully sign out of all Microsoft accounts in your browser, or try a private/incognito window, then go to ddt.ford.com again and sign in only with the exact email Ford confirmed was invited.

1. If it still fails, have Ford's IT team check the guest account status

If you still get AADSTS50020 after confirming the invite was sent and redeemed, ask Ford's IT or the DDT application owner to check your guest account status directly in their tenant, since a guest account can sometimes exist but not be properly linked to your home organization's identity, which produces this same error even after a successful invite.

If this answer helps you kindly accept the answer which will help others who have similar questions.

Best Regards,

Jerald Felix.