Microsoft Security | Microsoft Entra | Microsoft Entra ID
A cloud-based identity and access management service for securing user authentication and resource access
New account unusable due to user not being in tenant (???)
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(147.20000000000002, 80%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EV%3C/text%3E%3C/svg%3E)
Vincent
0
Reputation points
I just created a new account and wanted to create an Entra app. However, I cannot use Azure because I keep getting an error that does user does not exist in tenant. No idea what it is supposed to mean, this was a new clean signup.
Full error below. This is a brand new account, and the only account in this org. It is unusable and I cannot even file a support ticket because nothing on Azure works. Incredibly frustrating.
It needs to work for this specific email address so I can't just try another one. Any idea what is going wrong here?
{
"sessionId": "b792e3e8a2b34fa6a8b4febe801e8101",
"errors": [
{
"errorMessage": "interaction_required: AADSTS16000: User account '{EUII Hidden}' from identity provider 'live.com' does not exist in tenant 'Microsoft Services' and cannot access the application 'e6694c91-1590-4e35-9bb7-b865c638b9c1'(Microsoft_Azure_SupportPortalExtension) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account. Trace ID: 2238fb5a-dc03-4ab9-a9f8-f8c55d2f0200 Correlation ID: a813df6c-19a5-4452-8fed-c5fcc6748e73 Timestamp: 2025-11-11 12:34:41Z",
"clientId": "e6694c91-1590-4e35-9bb7-b865c638b9c1",
"scopes": [
"959678cf-d004-4c22-82a6-d2ce549a58b8/.default"
]
}
]
}
Microsoft Security | Microsoft Entra | Microsoft Entra ID
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(304, 22%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETG%3C/text%3E%3C/svg%3E)
Thanmayi Godithi 11,905 Reputation points Microsoft External Staff Moderator2025-11-14T01:43:26.7366667+00:00 Hi @Vincent,
Thank you for reaching out on Microsoft Q&A forum.
The error means the account you’re signing in with isn’t recognized as part of the Microsoft Entra tenant that owns the Azure subscription. This usually happens when you use a personal Microsoft account (like
live.com) without creating or joining a tenant.Please try these steps:
- Sign out from all Microsoft accounts in your browser to clear any cached sessions.
- Go to https://portal.azure.com and sign in again using the account that owns the subscription.
- If the issue persists, check whether your account has been added as an external (guest) user in the tenant.
- If not, a Global Administrator in that tenant will need to invite your account as an external user.
- If you suspect an active session conflict (personal vs. organizational account), try signing in through a tenant-specific URL: [https://portal.azure.com/<tenant-domain-name>] Example: https://portal.azure.com/contoso.onmicrosoft.com
- If no admin is available or access remains blocked, you’ll need to create a new Microsoft Entra tenant and associate your account with it: https://learn.microsoft.com/entra/fundamentals/create-new-tenant
For more details on this error: https://learn.microsoft.com/entra/identity-platform/reference-error-codes#aadsts16000
Kindly let us know if the above helps or you need further assistance on this issue.
-
Vincent 0 Reputation points
2025-11-14T07:33:22.4533333+00:00 Hi Thanmayi, thank you for your response. Unfortunately this is happening on 3 separate newly created business accounts with valid business domains. Each of these accounts should be the owner as they are independently and newly created. I don't know if the tld have something to do with it, two accounts I tried are on .bot and the other on .ventures. But those are modern valid tlds so should work.
I have tried your approach a number of times and on multiple browsers but I keep getting the same error. It seems to be server side. I cannot make any changes, load any details, or file a support ticket, because of the token error I keep getting. The accounts are all basically unusuable.
-
Thanmayi Godithi 11,905 Reputation points Microsoft External Staff Moderator
2025-11-17T11:42:06.55+00:00 -
Sign in to comment
Sign in to answer