The account needs to be added as an external user in the tenant first - AADSTS50020

Vinoth Jijan Vincent 221

Experiencing authentication issues
The portal is having issues getting an authentication token. The experience rendered may be degraded.

Additional information from the call to get a token:
Extension: fx
Resource: jarvis
Details: AADSTS50020: User account '{EmailHidden}' from identity provider 'live.com' does not exist in tenant 'Microsoft Services' and cannot access the application 'c44b4083-3bb0-49c1-b47d-974e53cbdf3c'(Azure Portal) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account.
Trace ID: e198db53-ed9d-4647-9349-cb05413b7f00
Correlation ID: 949c25ac-bbd1-47c8-8587-7362ffffb59f
Timestamp: 2021-11-24 01:33:12Z

How to fix this issue due to this azure active directory i'm unable to get the primary domain field with the default domain "onmicrosoft.com"

JamesTran-MSFT 37,236 Reputation points Microsoft Employee Moderator

2021-12-09T23:37:29.51+00:00

@Vinoth Jijan Vincent
I just wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

----------

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.
Joyce Covington 5 Reputation points

2023-08-31T13:38:22.4433333+00:00

I am not able to resolve my issue. I need a Azure Active Directory access so that I can access CSI employee benefits, pay information, etc. I just keep being sent in circles from these sites.
SpiritLittleBox-000 0 Reputation points

2024-11-18T03:56:31.7066667+00:00

I am not able to resolve my issue. I need a Azure Active Directory access so that I can access CSI employee benefits, pay information, etc. I just keep being sent in circles from these sites.
Maurice Fletcher 0 Reputation points

2025-08-12T21:39:24.5166667+00:00

I also received the message "The account needs to be added as an external user in the tenant first" which was much longer than that but the premise is the same. All I am trying to do is find my key in the event I am asked for it. This is a new computer only just set up with windows 11 and the bitlocker is enabled. I have not been asked to have any other account or to accept anything. do I actually need the key? It is just that it says something like the key which is I think 48 characters may be required if there are changes to the PC? Thanks in advance any help gratefully received.

9 answers

Florence Iosua 0 Reputation points

2025-08-06T04:22:10.3233333+00:00

Hello,

Can someone please help me. I'm having a problem and im receiveing this message.

"Sorry, but we’re having trouble signing you in.

AADSTS50020: User account '******@gmail.com' from identity provider 'live.com' does not exist in tenant 'BYU-Pathway Worldwide' and cannot access the application 'api://c8973960-a943-48e5-974c-49db7b1e17c5'(101008.Cmc.Portal) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account."

Thanks,

Flo
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
adamctaylor 0 Reputation points Microsoft External Staff

2023-09-12T19:06:30.23+00:00

I was able to resolve (this error in Visual Studio 2022) by unchecking -

Authenticate across all tenants when adding accounts in Options -> Accounts -> Sign-in options.
Please sign in to rate this answer.
Sibusiso Thokozani Mazibuko 0 Reputation points

2023-10-09T18:01:40.1666667+00:00

Im facing this problem how can I fix it
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more
Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more

Share via

The account needs to be added as an external user in the tenant first - AADSTS50020

9 answers

Your answer