How to Fix Microsoft Entra Sign-In Error AADSTS90072

AADSTS90072 means the signed-in identity does not exist in the tenant named by the application and cannot access that tenant as an external user. A tenant administrator must confirm the tenant ID, invite or provision the correct identity in Microsoft Entra ID, assign any required access, and then have the user sign out and request a fresh token.

Compare Methods for Fixing Microsoft Entra Sign-In Error AADSTS90072

Evaluation Dimension	Azure Portal UI	Microsoft Graph PowerShell
Execution Speed	Slower, requires navigating multiple graphical blades and menus.	Rapid, instantaneous command execution without UI rendering.
Bulk Operations	Impractical for onboarding multiple external partner accounts.	Highly efficient using CSV loops to process large user lists.
Accessibility Requirements	Low barrier to entry; ideal for single visual adjustments.	Requires module installation, administrator permissions, and scripting knowledge.
Relevance to fixing Microsoft Entra Sign-In Error AADSTS90072	Best for resolving ad-hoc, individual guest authentication failures.	Best for preemptively synchronizing external directories to prevent the error.

Fix Microsoft Entra Sign-In Error AADSTS90072

Using Azure Portal (Method X)

• Navigate to the Microsoft Entra admin center, expand the "Identity" menu, and select the "Users" node.
• Click "All users" and select "New guest user" from the top command bar.
• Fill in the external user's exact email address that is experiencing the authentication failure.
• Click "Invite" and instruct the external user to click the acceptance link in their email inbox to finalize the creation of their guest profile in the tenant.

Using Microsoft Graph PowerShell (Method Y)

• Launch PowerShell as an Administrator and authenticate to your tenant by running Connect-MgGraph -Scopes "User.Invite.All".
• Execute the invitation command using New-MgInvitation -InvitedUserEmailAddress "user@external.com" -InviteRedirectUrl "https://myapps.microsoft.com" -SendInvitationMessage:$true.
• Verify the user's addition by checking the command output object to ensure the "Status" property reads as "PendingAcceptance".

Who Should Use Azure Portal vs PowerShell to Fix Microsoft Entra Sign-In Error AADSTS90072

• Choose Azure Portal if: You are a tier-one helpdesk technician handling a single, isolated support ticket regarding fixing Microsoft Entra Sign-In Error AADSTS90072 and do not have access to backend automation tools.
• Choose Microsoft Graph PowerShell if: You are an infrastructure administrator who needs to resolve fixing Microsoft Entra Sign-In Error AADSTS90072 for an entire partner organization in bulk during a corporate merger or cross-tenant synchronization.

FAQs About Fixing Microsoft Entra Sign-In Error AADSTS90072

Why am I receiving the AADSTS90072 error when trying to access a partner organization's app?

This error occurs because your account has not been added as a guest user in the host organization's Microsoft Entra ID tenant. You must be invited and accept the invitation before accessing their resources.

Can I resolve this authentication issue on my own if I am an end user?

No, only an administrator from the tenant hosting the application can resolve this by sending you an external guest invitation to add your identity to their directory.

What should the tenant admin do to allow my external account to sign in successfully?

The administrator needs to navigate to the Microsoft Entra admin center, go to Users, select New guest user, and send an invitation to your exact email address.

Will accepting a guest invitation to fix this login error give the host tenant control over my credentials?

No, your primary authentication remains with your home identity provider. The host tenant only grants access rights to their specific applications without managing your actual password.

Open Local Documents in WPS Office During Account Recovery

• Acknowledge that WPS Office cannot change Microsoft Entra B2B configurations, issue directory guest invitations, or directly execute PowerShell modules to resolve cloud identity errors.
• Once the IT side is resolved, use WPS Writer to create a standardized external partner onboarding manual. Document the exact Azure Portal clicks and PowerShell commands used to address fixing Microsoft Entra Sign-In Error AADSTS90072, ensuring your helpdesk staff have a reliable offline reference.
• Utilize WPS PDF tools to securely export and distribute these troubleshooting runbooks to your internal IT support team, ensuring cross-platform readability without formatting loss across multiple operating systems.