Low severityauthentication
Power BI Error:
AADSTS90085, Tenant not fully provisioned
What does this error mean?
Microsoft Entra ID (Azure AD) cannot issue a token because the tenant's company object isn't fully provisioned yet.
Common causes
- 1A newly created Microsoft 365 / Entra ID tenant where the underlying company object hasn't finished backend provisioning yet
- 2An in-flight tenant migration, domain federation change, or directory sync operation leaving the company object in an inconsistent state
- 3Transient replication delay between Microsoft Entra ID regional backends after a tenant configuration change
- 4WS-Federation / SLT redemption against a federated domain whose federation trust was recently (re)configured but not yet fully propagated
- 5Backend Microsoft service issue affecting tenant token issuance (check the Microsoft 365 Service Health dashboard)
How to fix it
- 1Wait 15–60 minutes and retry sign-in / the Power BI refresh — provisioning and replication issues for AADSTS90085 typically clear themselves without admin action
- 2Check the Microsoft 365 Admin Center → Service Health and the Azure status page for active Entra ID / authentication incidents in your tenant region
- 3Verify the tenant is fully provisioned: sign in to entra.microsoft.com as a Global Admin and confirm the directory loads, users are visible, and no 'tenant setup' banners are shown
- 4If the error appears on a federated domain, in the Microsoft 365 admin center run Get-MsolDomainFederationSettings / Get-MgDomainFederationConfiguration and confirm the federation trust is healthy; reconfigure if it was recently changed
- 5If AADSTS90085 persists beyond an hour, open a Microsoft Support ticket — tenant-side company-object provisioning can only be unblocked by Microsoft engineering