What causes AADSTS50034?

User mistyped their UPN (username) at the sign-in prompt. User exists in a different tenant and was never invited as a B2B guest to this tenant. Application is configured against the wrong tenant ID or uses /common while expecting a single-tenant audience. Guest invitation was created but never redeemed, or the guest account was removed/soft-deleted. On-premises AD account not yet synced to Entra ID via Azure AD Connect

How do I fix AADSTS50034?

Verify the exact UPN the user is typing matches a user object in Entra ID (Azure AD) — search the user in the Entra admin center under Users > All users. If the user belongs to an external organization, invite them as a B2B guest via Entra ID > External Identities > All users > New guest user, and have them complete the redemption email. Check the application's authentication settings in Entra ID > App registrations: confirm the tenant ID in the authority URL matches the tenant where the user lives, and adjust 'Supported account types' if cross-tenant sign-in is needed. For hybrid setups, confirm the user is in scope of Azure AD Connect sync and force a delta sync (Start-ADSyncSyncCycle -PolicyType Delta) if the account was recently created on-prem. If the guest was previously deleted, restore from Entra ID > Deleted users within 30 days, or re-invite if the window has passed

Low severityauthentication

Power BI Error:
AADSTS50034

What does this error mean?

The signing-in user account does not exist in the Azure AD (Entra ID) tenant the application is configured for.

Common causes

1User mistyped their UPN (username) at the sign-in prompt
2User exists in a different tenant and was never invited as a B2B guest to this tenant
3Application is configured against the wrong tenant ID or uses /common while expecting a single-tenant audience
4Guest invitation was created but never redeemed, or the guest account was removed/soft-deleted
5On-premises AD account not yet synced to Entra ID via Azure AD Connect

How to fix it

1Verify the exact UPN the user is typing matches a user object in Entra ID (Azure AD) — search the user in the Entra admin center under Users > All users
2If the user belongs to an external organization, invite them as a B2B guest via Entra ID > External Identities > All users > New guest user, and have them complete the redemption email
3Check the application's authentication settings in Entra ID > App registrations: confirm the tenant ID in the authority URL matches the tenant where the user lives, and adjust 'Supported account types' if cross-tenant sign-in is needed
4For hybrid setups, confirm the user is in scope of Azure AD Connect sync and force a delta sync (Start-ADSyncSyncCycle -PolicyType Delta) if the account was recently created on-prem
5If the guest was previously deleted, restore from Entra ID > Deleted users within 30 days, or re-invite if the window has passed

Frequently asked questions

What does AADSTS50034 mean?

To sign into this application, the account must be added to the directory. This error can occur because the user mis-typed their username, or isn't in the tenant. An application might have chosen the

How do I fix this error?

Check your application registration, token configuration, and user permissions in the Azure portal. Review Conditional Access policies if the error is policy-related.

Source · learn.microsoft.com/en-us/entra/identity-platform/reference-error-codes#aadsts-error-codes