AADSTS90072: User account

Question

I get the below error when i try to loginto Global Protect VPN.

Earlier i have used VPN for client XXXX. Not i have to login to client ZZZZZ. But its using the client xxxx email address to log into client ZZZZZ network. I have uninstalled the app multiple times , but no use. I can successfullt connect in another laptop(connect to client ZZZZZ, and i never connected to client XXXX fromt his other laptop)

AADSTS90072: User account '******@xxxx.ca' from identity provider 'https://sts.windows.net/f4118c16-85fe-440e-8bf2-573cc8c6b420/' does not exist in tenant 'ZZZZZ' and cannot access the application 'https://gp-zzz.com:443/SAML20/SP'(Palo Alto Networks - GlobalProtect) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account

Answer 1

Hello V M,

Thanks for your question.

This is most likely due to cached creds on login with global protect.

You will have to try any of the following:

• Confirm first that the account still exists on the tenant and it is not a false error
• Open your web browser and Clear browsing data, ensuring that cookies and cached images/files are selected.
• If your device is connected to multiple accounts, you may need disconnect unnecessary work/school accounts: Go to Accounts > Access work or school and select the account causing conflict and click Disconnect.
• Try removing from credential manager. Press Win + R, type control keymgr.dll, nder Windows Credentials, locate any entries related to GlobalProtect or your VPN and remove

You can mark it 'Accept Answer' and 'Upvote' if this helped you

Regards,

Abiola

Answer 2

@V M

Thank you for posting this in Microsoft Q&A.

As I understand you are unable to connect to ZZZZZ using XXXX credentials.

In the above scenario, XXXX account is an external account for ZZZZZ client that you are using. The error indicates that the external account that the user signs in with doesn't exist on the tenant that they signed into.

To fix this issue you will have to add user XXXX as a guest user in ZZZZZ tenant. And also assign XXXX guest user to ZZZZZ application in the tenant.

You can follow below article to add XXX user to ZZZZ tenant as B2B user,

https://learn.microsoft.com/en-us/entra/external-id/add-users-administrator

https://learn.microsoft.com/en-us/entra/external-id/b2b-quickstart-add-guest-users-portal

Let us know if you have any further questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.