How to Fix AADSTS50105 Application Access Error in Microsoft Entra ID
Question details
Users are blocked from logging into an enterprise application via single sign-on and need access restored.
- Product
- Microsoft Entra ID
- Device & OS
- not provided
- Scenario
- A user is attempting to sign in to a SAML-based single sign-on enterprise application.
- Observed behavior
- Microsoft Entra ID blocks the login attempt with error code AADSTS50105, stating the user has not been granted access to the application.
This issue cannot be resolved by standard end users. You must have Microsoft Entra ID administrator privileges to modify enterprise application assignments.
Assign the User or Group to the Enterprise Application
Use the Microsoft Entra admin center to explicitly grant the blocked user access to the required application.
This error triggers because the target application requires user assignment, and the user attempting to sign in is neither directly assigned nor part of an assigned security group.
Sign in to the Microsoft Entra admin center using an account with Application Administrator or Global Administrator privileges.
Navigate to Identity > Applications > Enterprise applications, and search for the application the user is trying to access.
Click on the application name to open its overview page, then select 'Users and groups' from the left-hand management menu.
Click the 'Add user/group' button at the top of the pane. Click 'None Selected' under the Users and groups section to open the search panel.
Search for the specific user's name or email address (or a relevant security group), select them, and click the 'Assign' button at the bottom of the screen to finalize the access.
Keep Working Locally with WPS Office
If you are locked out of cloud-based enterprise applications and waiting for IT to resolve your Entra ID access, you can continue working on your documents locally. WPS Office is a free, lightweight suite that requires no complicated cloud logins to edit your files.
- 1. Download the Installer: Visit the official WPS Office website and download the free version for your operating system.
- 2. Install Locally: Run the installer to set up WPS Office on your computer without needing administrative cloud accounts.
- 3. Edit Office Files: Open any existing Microsoft Office documents saved on your hard drive and continue your work completely offline.
Frequently Asked Questions
Can I fix the AADSTS50105 error myself as an end user?
No, this error means you lack the necessary permissions to access the application within your organization's directory. You must contact your IT helpdesk or system administrator to request access.
Why am I getting this error if I am already logged into the company network?
Being signed into the company directory is not enough for enterprise applications configured with strict SAML-based SSO assignments. The application has been configured by administrators to require explicit assignment, meaning only authorized individuals or groups can access it.
How long does it take for the AADSTS50105 error to go away after an admin grants access?
Once the administrator assigns you to the enterprise application, the change typically takes effect within 5 to 15 minutes. You may need to clear your browser cache, delete old cookies, or sign in using an Incognito/Private window to force a new authentication token.
