Azure AD SSO Guest user can't login

user_611527 0
Viewed 797

On guest user login on redirect URI I got an error:

AADSTS1000031: Application {App name} cannot be accessed at this time. Contact your administrator.

I'm using multi-tenant approach. The authorization URL looks good and it redirects me with such an error.

But I can't find any description of the error or configuration in the azure related to this error.

Also, "normal" users can log in without any issues.

I have such configuration in my Azure App:

Azure app configuration

Could you please advise how can I enable guest accounts support here?

azure-active-directory
2 Answers
user_95414480

Has this SSO been setup as an Enterprise application? Or are you just trying to get a guest user logged in to your tenancy as a guest? If it is the later just create a new Guest user within your tenancy, make sure you have the rights to to do this first. Then have the guest user accept the email invitation they receive. Confirm within Azure they have accepted the invite. Also make sure they are using the same email address as the invite was sent to and not an alias, which can cause confusion.

user_132084760
Related