'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
How to Fix Error AADSTS50020 in Microsoft 365 Admin Center
Question details
The user is encountering the AADSTS50020 error when trying to log into the Microsoft 365 Admin Center using a personal email account, preventing administrative access to the tenant.
- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- Attempting to access and manage the Microsoft 365 Admin Center for an organization's tenant.
- Observed behavior
- The system denies access and displays error code AADSTS50020, indicating that the personal email account is not recognized as a user within the target tenant directory.
Ensure you are completely signed out of all personal Microsoft accounts in your browser, or open a private/incognito browsing window to prevent cached credential conflicts before attempting to sign in again.
Sign In Using Your Business or .onmicrosoft.com Account
Access the Admin Center using the official work account or the default administrative account created for your tenant.
The Microsoft 365 Admin Center requires elevated privileges that are typically only granted to work or school accounts associated with the organization's Azure Active Directory. Personal accounts (like @gmail.com or @outlook.com) will trigger an AADSTS50020 error unless explicitly added as guests.
Click on your profile picture in the top right corner of the Microsoft 365 portal and select 'Sign out'.
Open a new Incognito or InPrivate window in your web browser to ensure no old session data is used.
Navigate to the Microsoft 365 Admin Center and log in using your organization's business email or the default 'admin@yourdomain.onmicrosoft.com' account.
Request External User Access from a Global Administrator
If you must use a personal email address, ask an existing administrator to invite your personal account as a guest user.
Manage Your Documents Seamlessly with WPS Office
While resolving Microsoft 365 tenant login errors can be complex, your daily document work shouldn't be. WPS Office provides a lightweight, free, and highly compatible alternative to Microsoft Office, letting you create and edit documents without relying on complex admin center setups or cloud directory logins.
- 1. Visit the WPS Website: Go to the official WPS Office website to access the download portal.
- 2. Download the Installer: Click the 'Free Download' button to get the setup file for your operating system.
- 3. Install and Start Creating: Run the installer, complete the quick setup, and immediately start working on your spreadsheets, presentations, and documents.
Frequently Asked Questions
What exactly does the AADSTS50020 error code mean?
This error means that the user account you are trying to sign in with does not exist in the specific Azure Active Directory (tenant) you are trying to access. It acts as a security measure to prevent unauthorized users from viewing or managing organizational data.
Can I use a personal Gmail account to access Microsoft 365 Admin Center?
Generally, personal accounts cannot access the Admin Center. However, if a Global Administrator explicitly adds your Gmail account as an external guest user and assigns you an administrative role, you will be able to log in.
How do I find my organization's .onmicrosoft.com account?
The .onmicrosoft.com account is the default admin account created when your Microsoft 365 tenant was first established. You can usually find it in the original welcome emails sent by Microsoft, or by asking the IT personnel who set up your company's Microsoft services.
