抱歉，登录时遇到问题。

Question

抱歉，登录时遇到问题。

AADSTS50012: Authentication failed.

无法登录Microsoft365 E5订阅的子账号，请问究竟是什么问题，我已经请求管理员重置账号依然得不到解决。

Answer 1

Hello Dayuan Lin,

Thank you for choosing the Microsoft Community to answer your questions.

错误代码指向以下情况之一：

有关错误代码 AADSTS50012 的相关信息，您可以从本文中找到  https://learn.microsoft.com/en-us/azure/active-directory/develop/reference-aadsts-error-codes. 

AADSTS50012 身份验证失败 - 身份验证由于下列原因之一而失败：

签名证书的使用者名称未获得授权

未找到与授权使用者名称匹配的受信任颁发机构策略

证书链无效

签名证书无效

签名证书无效

未在租户上配置策略

签名证书的指纹未授权

客户端断言包含无效签名

或者需要从另一台PC或隐身浏览器进行处理

因此，你的查询与 Azure 团队相关。最好与他们联系，以便您得到准确的帮助。请通过以下方式与他们联系 azure-ad-authentication - Microsoft Q&A

对于其他问题，请不要犹豫，在 Microsoft 社区团队中添加您的帖子。

感谢您选择微软作为您的业务合作伙伴。

感谢您的耐心和理解，感谢您的时间和合作。

Eben Ezeterres | Microsoft Community Moderator

translate by bing

Hello Dayuan Lin,

 For error code AADSTS50012 related information can be found from this article https://learn.microsoft.com/en-us/azure/active-directory/develop/reference-aadsts-error-codes 

The error code points to one of this:

AADSTS50012 AuthenticationFailed - Authentication failed for one of the following reasons:

The subject name of the signing certificate isn't authorized

A matching trusted authority policy was not found for the authorized subject name

The certificate chain isn't valid

The signing certificate isn't valid

Policy isn't configured on the tenant

Thumbprint of the signing certificate isn't authorized

Client assertion contains an invalid signature

Or need to process from another PC or incognito browser.

So, your query is related to Azure Team. It will be best if you reach out to them so you can be assisted accurately. Please contact them via azure-ad-authentication - Microsoft Q&A

For other concerns, please do not hesitate to add you post in the Microsoft Community Team.

Thank you for choosing Microsoft as your partner in business.

Appreciate your patience and understanding and thank you for your time and cooperation.

Sincerely,

Eben Ezer Tres | Microsoft Community Moderator