Aadsts90072 Error: How to Fix This User Account Issue

Many users have reported they encounter an error AADSTS90072 during an account login. The issues occurs when you try using an account that is not in the directory, prompting an error error.

Alternatively, you can read through our article about how to fix the 0x801c03f3 Hybrid Azure AD Error on your PC.

Before we fix the issue, let’s take a look at underlying causes for it.

What causes the Aadsts90072 error?

The following are potential causes for the AADSTS90072 error:

• Account doesn’t exist in the tenant – if the external account that the user is trying to sign in with doesn’t exist on the tenant that they signed into, it can prompt the error. Also, it is because the user can’t satisfy the MFA (Multi-factor authentication) requirements for the tenant, making it unauthorized.
• There is a mismatch in the ImmutableID attribute – The error can also occur if there is a mismatch in the ImmutableID (sourceAnchor) attribute between Active Directory and Azure AD regardless of the users being synced.

These factors can vary on different computers depending on the condition. However, we’ll take you through detailed steps for fixing the issue.

How can I fix the Aadsts90072 error?

Before proceeding with any advanced troubleshooting steps, try the following preliminary checks:

• Restart your PC – Restarting the computer will fix temporary issues affecting its performance and refresh its activities.
• Fix network issues – Power cycling your router/modem or fixing network congestion on your computer can help you connect faster to the internet.
• Use the Firefox browser and clear cookies for cookies – Clearing cookies for login.microsoft.com and teams.microsoft.com on Firefox should prevent the error from popping up again.

If you can’t resolve the error, go ahead with the solutions below:

1. Exclude Azure Information Protection from Require MFA for guests’ policies

1. Go to Azure Dashboard and click on the Conditional Access option.
2. Navigate to the Assignments tab, and select Users and groups under it.
3. On the left pane, go to the Include tab and check the box for All guest and external users.
4. Go to the Assignments tab on the right pane and select the Cloud apps or actions section.
5. Navigate to the Excluded cloud apps section and select Microsoft Azure Information Protection as an exclusion.
6. Try to log in to your account and check if the error AADSTS90072 persists.

The above steps allow the Microsoft Azure Information Protection cloud app to run without adhering to the Require MFA for guests policies.

2. Exclude guest and external users

1. Create a new conditional access policy.
2. Go to the Assignments tab on the left pane, and click on the Users and groups option.
3. Select the Exclude tab on the right side of the screen, then check the box for All guest and external users.
4. Under the Assignments tab, click on the Cloud apps or actions section on the left pane.
5. On the right pane, go to the Include section and check the box for the Microsoft Azure Information Protection cloud app.
6. Navigate to the Access controls tab on the left pane, and select Grant.
7. Tick the radio button for Grant access and check the box for Require multi-factor authentication.

The above steps will exclude guests and external users from the RMA (Request multi-factor authentication) and grant access through Access Policy.

Read more about this topic

• Microsoft expands Coca-Cola partnership to the tune of $1.1B for Azure and AI Services
• Microsoft highlights advantages of running Linux on Azure, reliability and security are the key aspects
• Solved: Account Picture Error This Picture Couldn’t be Saved
• Microsoft announces WordPress on App Service free hosting plan is generally available
• CISA issued the ED 24-04 after a Microsoft breach to help federal agencies

3. Disconnect the Organizational account

1. Left-lick the Start button and click on Settings.
2. Select the Accounts tab and click on Access work or school.
3. Further, locate the organization account added and click on the Disconnect button.
4. Confirm your selection by clicking Yes on the prompt.
5. Click Disconnect again when another prompt asks you to disconnect from the organization account.
6. Now, restart the Teams app and check if the error persists.

Alternatively, you can try to access the Teams web version to confirm if the issue is resolved.

In conclusion, our readers can check our guide about the Azure Functions Runtime unreachable error and ways to fix it on their PCs.

If you have further questions or suggestions concerning this guide, kindly drop them in the comments section below.