I cannot access an application that was sent to me through email

Michael Battle 0 Reputation points
2026-03-08T22:24:26.9966667+00:00

I'm try to access an application that was sent to me through email and it's asking me to sign in through Microsoft sign in but when I sign in it's says I can't access it because of external tenant

Microsoft 365 and Office | SharePoint | For business | Android
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2026-03-09T00:33:08.5133333+00:00

    Hi Michael Battle,

    Welcome to Microsoft Q&A Forum! Have a good day and I hope you're doing well!

    I understand how frustrating it can be when you’re trying to access an application and encounter a sign-in error.

    Based on my research, the “external tenant” message typically appears when the account used to sign in does not match the one that was granted access.

    To start, please try the following steps:

    1. Sign out of all Microsoft accounts in your browser.
    2. Open a private browsing window.
    3. Sign in again using the exact email address that received the invitation.

    If you still receive the “external tenant” error after trying the steps above, the issue is likely related to permissions on the sender’s organization side. I recommend contacting the person who shared the application and asking them to confirm:

    • That your email address has been added to their organization as a Guest (external user), and
    • That you have been granted the appropriate access to the SharePoint site, app, or Team.

    They may need to review the guest access settings in Microsoft Entra ID (Azure AD) or reshare the application with the correct email address to ensure permissions are properly assigned.

    Additionally, could you please provide a full screenshot of the detailed error message? This will give me more insight and help me suggest more precise troubleshooting steps.

    I hope this will at least partially help move things forward. If you have any updates or if I’ve misunderstood anything, please feel free to let me know. I’m happy to continue assisting you.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".    

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.  

    Was this answer helpful?

  2. AI answer

    2026-03-08T22:24:39.2766667+00:00

    Access to Microsoft applications that are shared by email is controlled by the tenant (organization) that owns the app. The “external tenant” message indicates that the account being used to sign in doesn’t meet that tenant’s access requirements.

    Use these checks and actions:

    1. Verify the correct account
      • Make sure the sign-in uses the work or school account that the sender expects, not a personal Microsoft account.
      • If multiple accounts are signed in on the device/browser, sign out of all and sign in only with the intended organizational account.
    2. Confirm the account exists and is enabled in the external tenant
      • The app owner’s organization must verify that the user account exists in their Microsoft Entra ID as a guest or member, is not locked out, and is enabled for sign-in.
      • They should also confirm the password is valid and not expired, and that multifactor authentication (if required) is not blocking access.
    3. Check licensing (if the app requires a license)
      • If the application is a licensed Microsoft 365 app (for example, SharePoint/Office 365), the admin in the external tenant must ensure:
        • A valid license for that app is assigned directly to the user or via a group.
        • The license is not expired.
        • If licenses are assigned via dynamic groups, the user is actually in the group and membership processing is complete.
    4. Check Conditional Access or security policies
      • The external tenant’s admin should verify that no Conditional Access policy is blocking the sign-in (for example, requiring a compliant device, MFA, or specific locations) and that user authentication contact info is up to date.
    5. Check application consent
      • If the app is a multitenant app that requires permissions, the external tenant’s admin may need to grant admin consent for the app so that external/guest users can access it.

    If access is still blocked, contact the sender or their IT administrator and provide the exact error text. They must adjust their tenant’s user, license, Conditional Access, or consent settings to allow the external account to sign in.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.