Error AtlasError Documentation and Resolution
Back to search

Microsoft Entra ID

Microsoft Entra user account from the identity provider does not exist in the tenant

AADSTS50020: User account from identity provider does not exist in tenant.

Microsoft Entra ID could not complete sign-in because the account attempting access does not exist in the target tenant or is using the wrong tenant or account type.

AADSTS50020authentication

Observed message

AADSTS50020: User account from identity provider does not exist in tenant.

Why it happens

  • The user is signing into the wrong tenant.
  • The guest account was not invited or is not present in the target tenant.
  • The app registration account type or sign-in endpoint does not match the expected audience.

How to fix it

  1. Verify the intended tenant and sign the user in with the correct account type for that tenant.
  2. Invite the guest user if this is a cross-tenant access scenario.
  3. Review the app registration audience and the sign-in endpoint being used by the application.

Official reference

Error AADSTS50020 - User account from identity provider does not exist in tenant

Related errors

AADSTS54005Microsoft Entra authorization code was already redeemedAADSTS7000215Microsoft Entra client secret is invalidAADSTS700016Microsoft Entra could not find the application in the directoryAADSTS90071Microsoft Entra cross-tenant access failed because inbound MFA trust is not configured

Explore more

authenticationBrowse more authentication errors
AADSTS50020 user account does not exist in tenant | Error Atlas