Error AtlasError Documentation and ResolutionEntra documented errors
Browse documented Entra errors with exact messages, troubleshooting context, and practical remediation steps.
Authentication
Authentication errors
AADSTS54005Microsoft Entra authorization code was already redeemedMicrosoft Entra ID rejected the token request because the authorization code has already been used and cannot be redeemed again.
AADSTS7000215Microsoft Entra client secret is invalidMicrosoft Entra ID rejected the confidential-client request because the provided client secret is wrong, expired, or the wrong secret value was used.
AADSTS700016Microsoft Entra could not find the application in the directoryMicrosoft Entra ID could not locate the application identifier in the target tenant, so the authentication request could not continue.
AADSTS90071Microsoft Entra cross-tenant access failed because inbound MFA trust is not configuredMicrosoft Entra cross-tenant B2B direct connect access failed because inbound multifactor-authentication trust settings are not configured correctly between the organizations.
AADSTS50011Microsoft Entra redirect URI does not match the app registrationMicrosoft Entra ID rejected the sign-in request because the redirect URI sent by the app does not match the redirect URIs configured in the app registration.
AADSTS700082Microsoft Entra refresh token expired because of inactivityMicrosoft Entra ID rejected the refresh attempt because the refresh token exceeded its inactivity lifetime and can no longer be used to obtain new access tokens.
AADSTS70000Microsoft Entra refresh token is not validMicrosoft Entra ID rejected the token refresh request because the refresh token is no longer valid for the client or user context.
AADSTS65001Microsoft Entra requires user or admin consent for the applicationMicrosoft Entra ID rejected the sign-in or token request because the user or tenant administrator has not granted the required permissions to the application.
AADSTS50053Microsoft Entra sign-in failed because the account is lockedMicrosoft Entra ID rejected the sign-in because the account is locked, often after too many failed attempts or risk-based protection action.
AADSTS65004Microsoft Entra sign-in failed because the user declined consentMicrosoft Entra ID stopped the sign-in flow because the user explicitly declined the consent prompt for the application.
AADSTS50020Microsoft Entra user account from the identity provider does not exist in the tenantMicrosoft Entra ID could not complete sign-in because the account attempting access does not exist in the target tenant or is using the wrong tenant or account type.
Configuration
Configuration errors
AADSTS650056Microsoft Entra rejected the app as misconfiguredMicrosoft Entra ID rejected the authentication request because the application registration, permissions, identifier, or credential configuration is incomplete or inconsistent.
AADSTS650057Microsoft Entra rejected the requested resource as invalid for the appMicrosoft Entra ID rejected the request because the application asked for access to a resource that is not listed in its configured API permissions.
AADSTS70011Microsoft Entra rejected the requested scope as invalidMicrosoft Entra ID rejected the authorization or token request because the scope value is missing, malformed, or not valid for the target application or resource.