25,080 questions
Test user in test tenant after testing B2B and Bastion are disabled
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(0, 35%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EWH%3C/text%3E%3C/svg%3E)
Wallus, Harald
1
Reputation point
Hi,
I'm testing
Home-Tenant -> B2B -> Resource Tenant -> Bastion -> VM access.
I also test the az Bastion tunnel and the SCP.
Now, a day later, my both test user test01 und test02 in the home-tenant are disabled, when I try to log in with these accounts to portal.azure.com:
Dieses Microsoft-Konto ist nicht vorhanden. Geben Sie ein anderes Konto ein, oder fordern Sie ein neues an
I can still login with this account through power shellr, but not open the portal.
If I use the admin in the portal, I can't see anything to re-enable the accounts. There are still exisitng. I can call the attribute via graph api.
What is goint on? What can I do to re-enable?
Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} votes
-
Wallus, Harald 1 Reputation point
2022-05-31T08:51:50.74+00:00 Sorry for the german part. Translation:
This Microsoft account does not exist. Enter another account or request a new one -
Wallus, Harald 1 Reputation point
2022-05-31T09:31:45.64+00:00 Next infos:
I disabled and enabled again the user by an admin through portal: doesn't has any effect.
Then I delete the guest-user hook within the resource tenant ... ah.
Then I was able to login with the following message: (I must translate again :-/)
Within the director "resource-tenant" are not avaible any azure abonnements, click to move to another directory.
And right, I login, then again I got the authentication screen, select the user again, and then I was in.I assume it is something with the B2B-hook. my home tenant does not hav a subscription, but the resource tenant has. Maybe, as log as the B2B-hook is available within the resource tenant with the subscription Azure Ad is redirecting to the tenant with the subscription? And for what reason ever, the account behaves as disabled. It is a bit strange.
-
AmanpreetSingh-MSFT 56,871 Reputation points Moderator2022-06-01T11:20:55.89+00:00 Hi @Wallus, Harald • I suspect that the problem is with one specific tenant, to which Azure Portal connects by default. That is why you were able to log in through PowerShell which might be connecting to the other tenant which doesn't have any issues.
You can navigate to the Directories + subscriptions blade, and change the Startup directory to the tenant/directory that you want Azure Portal to connect to by default.
Also, reach out to the Global or User administrator of the tenant for which the account is failing to sign in with error:
This Microsoft account does not exist. Enter another account or request a new one, to confirm if the Block sign-in option on the profile page of your user account is set to No. If this option is set to YES, the account is considered disabled.You can also use
https://portal.azure.com/?tenantid=YOUR_TENANT.onmicrosoft.comto force the Azure portal to connect to the specified tenant. -
AmanpreetSingh-MSFT 56,871 Reputation points Moderator
2022-06-03T04:36:43.573+00:00 Hi @Wallus, Harald • Just checking if you had a chance to look into it.
Sign in to comment
Sign in to answer