{ "sessionId": "1dddcb43f3a44aaab9600ecf5c916adf", "errors": [ { "errorMessage": "interaction_required: AADSTS16000: User account '{EUII Hidden}' from identity provider 'live.com' does not exist in tenant 'Default Directo

Question

{
  "sessionId": "1dddcb43f3a44aaab9600ecf5c916adf",
  "errors": [
    {
      "errorMessage": "interaction_required: AADSTS16000: User account '{EUII Hidden}' from identity provider 'live.com' does not exist in tenant 'Default Directory' and cannot access the application 'f9885e6e-6f74-46b3-b595-350157a27541'(Microsoft_AAD_UsersAndTenants) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account. Trace ID: 18c5f3b4-0174-4652-8244-983e370c9100 Correlation ID: 1b1a6eda-77bd-478e-bbc1-adb4710bb6d7 Timestamp: 2024-12-24 04:43:47Z",
      "clientId": "f9885e6e-6f74-46b3-b595-350157a27541",
      "scopes": [
        "74658136-14ec-4630-ad9b-26e160ff0fc6/.default"
      ]
    },
    {
      "errorMessage": "interaction_required: AADSTS16000: User account '{EUII Hidden}' from identity provider 'live.com' does not exist in tenant 'Default Directory' and cannot access the application 'f9885e6e-6f74-46b3-b595-350157a27541'(Microsoft_AAD_UsersAndTenants) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account. Trace ID: 4645ebdf-7716-4a67-908c-0835271a9300 Correlation ID: 6263244e-3262-4baa-b046-f5fa5a91524c Timestamp: 2024-12-24 04:43:47Z",
      "clientId": "f9885e6e-6f74-46b3-b595-350157a27541",
      "scopes": [
        "https://graph.microsoft.com//.default"
      ]
    }
  ]
}
when i attempt to access azure entra, this pops up and scense i only have one account i cant acces it.

Answer 1

Hi @Asher Nelson

Thank you for reaching us!

Error AADSTS16000 is thrown when the user not found in the tenant used for authentication. In your case, this error usually occurs when you sign in to Azure Portal using your personal account which is not added as an external/guest user to an Azure AD tenant. Due to this, you by default get connected to the Microsoft Services tenant.

Since you are connected to the Microsoft Services tenant as a standard user with restricted access, you cannot perform actions such as creating new users, groups, enterprise applications, and so on. To perform administrative actions, you must have administrative access to the tenant.

For this purpose, you need to create your own tenant rather than using the Microsoft Services tenant. When you create a new tenant, you by default become the Global Administrator of the new tenant and have full access to all the options in that tenant.

To create a new tenant, open in-private/incognito browser window (just to avoid SSO), access https://azure.microsoft.com/en-us/free/ to create a free Azure account.

Once the new account is created, you should be able to see and switch to the new tenant by clicking on the settings icon as highlighted below:

In some cases, the user might already have an active session that uses a different personal account than the one that's intended to be used. Or they have a session that uses their organization account although they intended to use a personal guest account (or vice versa).

In that scenario, try signing in to the Azure Portal trough a tenant-specific URL using the following format:

https://portal.azure.com/<tenant domain name>

Eg.

https://portal.azure.com/constoso.onmicrosoft.com

If the issue persisted, try to clear the browser data or try with the different browser and see if the issue is fix

Reference: https://learn.microsoft.com/en-us/answers/questions/1403749/encountered-an-authentication-problem

Hope this helps. Do let us know if you any further queries by responding in the comments section.

Thanks,

Akhilesh V.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.