An error causes inaccessibility to services and data in the account AADSTS16000: User account '{EUII Hidden}' from identity provider 'live.com' does not exist in tenant 'Microsoft Services' and cannot access the application

Salman Abdul Rhman Sakr 0 Reputation points
2024-09-02T00:08:55.9533333+00:00

Good evening,

Now I have an account on Microsoft Azure and I have “Account Storage” on it and it contains a large amount of data for my private project and it cannot be lost.

Now I am trying to access my account, Services, Users, or anything else

But it prints me the following error:

[ Interaction required

The portal encountered an issue while attempting to retrieve access tokens. We suggest attempting to sign in again, or alternatively, continuing without access tokens, although this may result in a suboptimal user experience. Additional details: interaction_required: AADSTS16000: User account '{EUII Hidden}' from identity provider 'live.com' does not exist in tenant 'Microsoft Services' and cannot access the application 'f9885e6e-6f74-46b3-b595- 350157a27541'(Microsoft_AAD_UsersAndTenants ) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account. Trace ID: 3aa02e96-838f-426f-89c6-0e4972d11100 Correlation ID: e9aaf2ef-cf9a-44fa-b401-40fd0fef5442 Timestamp: 2024-08-22 09:40:35Z.

Click here to copy details

Sign in again

Ignore ]

Knowing that this happened because I tried to change the account’s email to this email: c**ners4@gmail.com a month ago.

Since then, I cannot access my resources on my account

A picture of the error is attached

The email for my account is the same as the email sent from: sal****akr0@gmail.com

I hope to solve the problem as soon as possible because I am severely affected

Azure Storage Accounts
Azure Storage Accounts
Globally unique resources that provide access to data management services and serve as the parent namespace for the services.
3,217 questions
{count} votes

2 answers

Sort by: Most helpful
  1. akinbade abiola 18,130 Reputation points
    2024-09-02T03:37:59.2066667+00:00

    You have to confirm if your are part of the tenant. If not you need to request an invite and redeem.

    If you confirm you are part of tenant, to resolve the error, sign out from the active session and sign in with a new incognito window or any different browser.

    See:

    Error AADSTS50020 - User account from identity provider does not exist in tenant

    You can mark it 'Accept Answer' and 'Upvote' if this helped you

    Regards,

    Abiola

    0 comments No comments

  2. Sumarigo-MSFT 46,441 Reputation points Microsoft Employee
    2024-09-02T16:20:05.43+00:00

    @Salman Abdul Rhman Sakr Welcome to Microsoft Q&A Forum, Thank you for posting your query here!
    Adding more information to the above response!
    I'm sorry to hear that you're experiencing this issue with your Azure account. The error message you're seeing indicates that your user account from the identity provider 'live.com' does not exist in the tenant 'Microsoft Services'. This typically happens when the account is not recognized as an external user in the tenant.

    Here are a few steps you can try to resolve this issue:

    1. Sign Out and Sign In Again: Sometimes, simply signing out and signing back in with the correct Azure Active Directory (AAD) user account can resolve the issue. Make sure you use the email address that is recognized by the tenant.
    2. Add as an External User: If the account you are trying to use is not recognized by the tenant, you may need to add it as an external user. You can do this by:
      • Going to the Azure portal.
      • Navigating to the Azure Active Directory section.
      • Selecting "Users" and then "New guest user".
      • Entering the email address you want to add and following the prompts to complete the process.
    3. Check Account Settings: Ensure that the email address you changed to (c**ners4@gmail.com) is correctly set up and verified in your Azure account settings.

    Error AADSTS16000 is thrown when the user not found in the tenant used for authentication. In your case, this error usually occurs when you sign in to Azure Portal using your personal account which is not added as an external/guest user to an Azure AD tenant. Due to this, you by default get connected to the Microsoft Services tenant.

    Since you are connected to the Microsoft Services tenant as a standard user with restricted access, you cannot perform actions such as creating new users, groups, enterprise applications, and so on. To perform administrative actions, you must have administrative access to the tenant.

    For this purpose, you need to create your own tenant rather than using the Microsoft Services tenant. When you create a new tenant, you by default become the Global Administrator of the new tenant and have full access to all the options in that tenant.

    To create a new tenant, open in-private/incognito browser window (just to avoid SSO), access https://azure.microsoft.com/en-us/free/ to create a free Azure account.

    Once the new account is created, you should be able to see and switch to the new tenant by clicking on the settings icon as highlighted below:

    User's image

    In some cases, the user might already have an active session that uses a different personal account than the one that's intended to be used. Or they have a session that uses their organization account although they intended to use a personal guest account (or vice versa).

    In that scenario, try signing in to the Azure Portal trough a tenant-specific URL using the following format:

    https://portal.azure.com/<tenant domain name>

    Eg.

    https://portal.azure.com/constoso.onmicrosoft.com

    Issue while logging in to Azure/Entra portal - AADSTS50020/AADSTS160021/AADSTS16000

    Please let us know if you have any further queries. I’m happy to assist you further.    


    Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.