How to Fix OAuth2 Login Error: Account Not Recognized in Azure
Question details
Users are encountering a 'There was an issue looking up your account' error when entering their email address on the Microsoft sign-in page.
- Product
- Microsoft Azure / Microsoft Entra ID
- Device & OS
- not provided
- Scenario
- Signing into an Azure application utilizing Microsoft Graph OAuth2 for the Mail.Send functionality.
- Observed behavior
- The Microsoft sign-in page fails to recognize the user account and displays an error message immediately after the email address is submitted.
Ensure you have access to the Azure portal with administrative privileges to view app registrations, API permissions, and Microsoft Entra ID sign-in logs.
Verify Azure Application and Tenant Configurations
Check that your Azure application ID, directory ID, and tenant settings exactly match the configuration in your application code.
Mismatched credentials or incorrect endpoints are the most common causes of this account lookup error during the OAuth2 flow.
Log into the Azure portal, navigate to Microsoft Entra ID, and select 'App registrations' from the left-hand menu.
Click on your application to view its Overview page. Verify that the 'Application (client) ID' and 'Directory (tenant) ID' strictly match the values configured in your app.
Navigate to the 'Authentication' tab to confirm that your redirect URI is correct and that you are using the tenant-specific authorization endpoint instead of the common endpoint.
Check API Permissions and Client Secrets
Ensure the application has been granted proper Microsoft Graph permissions and that security certificates have not expired.
Review Sign-in Logs and Account Status
Investigate Microsoft Entra ID sign-in logs to identify blockages from Conditional Access policies or suspended accounts.
Looking for a reliable Office suite? Try WPS Office
While troubleshooting Azure and Microsoft Graph integrations, you might also need a fast, free, and highly compatible alternative to Microsoft Office for your daily document and email template drafting needs. WPS Office offers seamless performance without the heavy subscription costs.
- 1. Download the Installer: Visit the official WPS Office website and click the free download button for your operating system.
- 2. Install WPS Office: Run the downloaded installer and follow the on-screen prompts to set up the software.
- 3. Open Your Documents: Launch WPS Office to instantly open and edit your existing Microsoft Word, Excel, and PowerPoint files.
Frequently Asked Questions
Why does Microsoft Entra ID say 'There was an issue looking up your account'?
This error typically occurs if the email address entered does not exist within the specified Microsoft Entra ID tenant, or if there is a mismatch between the Application ID and Directory ID configured in your app versus the Azure portal.
How do I grant admin consent for Mail.Send in Azure?
Navigate to your App registration in the Azure portal, click on 'API permissions', add the 'Mail.Send' permission under Microsoft Graph, and then click the 'Grant admin consent for [Your Tenant]' button at the top of the list.
Where can I check if a Conditional Access policy is blocking my sign-in?
In the Azure portal, navigate to Microsoft Entra ID and select 'Sign-in logs'. Click on the specific failed sign-in attempt and open the 'Conditional Access' tab to see which policies were applied or caused a block.
