Error AADSTS50020 - User account from identity provider does not exist in tenant

Hello Ragunath Gunasekaran,

You’re correct. This behavior is expected when the account is being treated as a guest user in the tenant where the subscription exists.

Even if the invitation shows as Accepted in Microsoft Entra ID, errors such as AADSTS50020, “Interaction required”, or “No subscriptions found” can still occur when the identity is not fully recognized as a member of the resource tenant. In this state, the user may authenticate successfully but won’t have visibility or permissions on the subscription.

This typically happens when:

• The account was not properly invited or the guest redemption is incomplete
• The user is signing in from their home tenant, which does not own the subscription
• The guest user object exists but is missing required role assignments (Owner/Contributor)

To resolve this and restore owner‑level access, please try the following:

1. Switch to the correct directory
   • In the Azure portal, click your profile (top‑right) → Switch directory
   • Select the tenant where the subscription resides
2. Verify the guest account
   • Go to Microsoft Entra admin center → Users → External users
   • Confirm the account is present and shows Accepted
   • If not, ask a tenant admin to re‑invite the account
3. Assign the Owner role
   • Azure Portal → Subscriptions → select the subscription → Access control (IAM)
   • Assign the Owner role to the guest account
4. Sign in using the tenant‑specific URL
   • https://portal.azure.com/?tenant=<TenantID>
5. Clear cached tokens
   • Sign out from all Microsoft sessions
   • Sign back in using an InPrivate/Incognito browser window

Once these steps are completed, the account should be fully recognized in the tenant and regain access to manage the subscription.

Reference:
https://learn.microsoft.com/en-us/troubleshoot/entra/entra-id/app-integration/error-code-AADSTS50020-user-account-identity-provider-does-not-exist