Personal Outlook.com account cannot create or access an Entra tenant for Azure App Registration

Question

I need to create an Entra tenant and register a delegated Microsoft Graph application for my personal Outlook.com account.

My personal Microsoft account is routed to the “Microsoft Services” tenant, where it is not a member. Azure/Entra fails before I can create a tenant or start an Azure Free subscription.

Error: AADSTS50020 / AADSTS50058

Client ID: 74658136-14ec-4630-ad9b-26e160ff0fc6

Trace ID: 5f7be0f0-1d76-4b96-9c68-1926802b0e00

Correlation ID: b1406ae9-f74e-48e2-8187-ae18308b842e

Timestamp: 2026-08-02 18:24:49Z

Please enable or provision a tenant/subscription path for this personal Microsoft account.

Answer 1

Thank you. I understand that I need to create a new Azure tenant through the Azure Free sign-up flow.

However, the Azure sign-up flow itself is failing before a tenant or subscription is created.

I already tried:

• InPrivate browser session
• Clearing cookies and cache
• Signing in again with my personal Outlook.com account

The result is still:

AADSTS50058: login_required

followed by:

AADSTS50020: The selected user account does not exist in the "Microsoft Services" tenant.

No Azure subscription, custom Entra tenant, or alternative directory appears in my account, so I cannot switch directories or create the app registration.

Could you please advise how to complete Azure Free enrollment or escalate this provisioning issue for a personal Microsoft account?

Trace ID: 5f7be0f0-1d76-4b96-9c68-1926802b0e00

Correlation ID: b1406ae9-f74e-48e2-8187-ae18308b842e

Timestamp: 2026-08-02 18:24:49Z

Answer 2

A personal Outlook.com account is typically signed in to the Microsoft Services tenant by default. That tenant does not have a linked directory for administrative actions such as app registration or tenant management, so this behavior is expected.

To get a usable Microsoft Entra tenant for app registration:

1. Open an InPrivate/incognito browser window to avoid automatic sign-in to the Microsoft Services tenant.
2. Go to the Azure account sign-up page and start Try Azure for free.
3. Complete Azure account creation.
4. A new Microsoft Entra tenant is created together with the Azure account.
5. The account used during sign-up becomes the Global Administrator of that new tenant.

After that, verify the tenant in the Microsoft Entra admin center:

1. Sign in to the Microsoft Entra admin center.
2. Check the upper-right corner for the tenant name under the account name.
3. If multiple tenants are associated with the account, use the account menu to switch tenants.
4. To find the tenant ID, go to Entra ID > Overview > Properties and check Tenant ID.

If the goal is to register an app that supports personal Microsoft accounts, create the app registration in that tenant and select the supported account type that includes personal Microsoft accounts:

• Accounts in any organizational directory (Any Microsoft Entra ID tenant - Multitenant) and personal Microsoft accounts (for example, Skype, Xbox)

If an existing app registration was created as single-tenant, users from other directories or identity providers cannot sign in. In that case, re-create the app registration with the correct account type, because signInAudience cannot currently be changed in the manifest.

If the app is intended to support both organizational and personal Microsoft accounts, the sign-in endpoint must also match that audience:

• https://login.microsoftonline.com/common

If access is blocked specifically because the tenant tied to the account became inactive, a reactivation may require Microsoft intervention rather than a self-service bypass.

---

References:

• Error AADSTS50020 - User account from identity provider does not exist in tenant
• Set up a new Microsoft Entra tenant
• Add Microsoft account (live.com) as an OpenID Connect identity provider