Error AtlasError Documentation and ResolutionEntra documented errors
Browse Entra error messages, error codes, troubleshooting explanations, and practical fixes with exact wording and search-friendly reference pages.
This Entra error reference is designed for users searching exact Entra error messages, error codes, and clear how-to-fix guidance.
Entra error searches are extremely code-driven. Users usually arrive with an `AADSTS` code from a sign-in flow, consent prompt, token exchange, or application registration problem and need a direct explanation fast.
This hub is structured around that exact-match behavior, while still making it easier to browse related authentication, authorization, token, and app-configuration failures.
Authentication
Authentication errors
AADSTS54005Microsoft Entra authorization code was already redeemedMicrosoft Entra ID rejected the token request because the authorization code has already been used and cannot be redeemed again.
AADSTS7000215Microsoft Entra client secret is invalidMicrosoft Entra ID rejected the confidential-client request because the provided client secret is wrong, expired, or the wrong secret value was used.
AADSTS700016Microsoft Entra could not find the application in the directoryMicrosoft Entra ID could not locate the application identifier in the target tenant, so the authentication request could not continue.
AADSTS90071Microsoft Entra cross-tenant access failed because inbound MFA trust is not configuredMicrosoft Entra cross-tenant B2B direct connect access failed because inbound multifactor-authentication trust settings are not configured correctly between the organizations.
AADSTS50011Microsoft Entra redirect URI does not match the app registrationMicrosoft Entra ID rejected the sign-in request because the redirect URI sent by the app does not match the redirect URIs configured in the app registration.
AADSTS700082Microsoft Entra refresh token expired because of inactivityMicrosoft Entra ID rejected the refresh attempt because the refresh token exceeded its inactivity lifetime and can no longer be used to obtain new access tokens.
AADSTS70000Microsoft Entra refresh token is not validMicrosoft Entra ID rejected the token refresh request because the refresh token is no longer valid for the client or user context.
AADSTS65001Microsoft Entra requires user or admin consent for the applicationMicrosoft Entra ID rejected the sign-in or token request because the user or tenant administrator has not granted the required permissions to the application.
AADSTS50053Microsoft Entra sign-in failed because the account is lockedMicrosoft Entra ID rejected the sign-in because the account is locked, often after too many failed attempts or risk-based protection action.
AADSTS65004Microsoft Entra sign-in failed because the user declined consentMicrosoft Entra ID stopped the sign-in flow because the user explicitly declined the consent prompt for the application.
AADSTS50020Microsoft Entra user account from the identity provider does not exist in the tenantMicrosoft Entra ID could not complete sign-in because the account attempting access does not exist in the target tenant or is using the wrong tenant or account type.
Configuration
Configuration errors
AADSTS650056Microsoft Entra rejected the app as misconfiguredMicrosoft Entra ID rejected the authentication request because the application registration, permissions, identifier, or credential configuration is incomplete or inconsistent.
AADSTS650057Microsoft Entra rejected the requested resource as invalid for the appMicrosoft Entra ID rejected the request because the application asked for access to a resource that is not listed in its configured API permissions.
AADSTS70011Microsoft Entra rejected the requested scope as invalidMicrosoft Entra ID rejected the authorization or token request because the scope value is missing, malformed, or not valid for the target application or resource.