Single Sign-On using Microsoft Account to login through Azure

Question

Hi am trying Microsoft Single Sign-on authentication to my Login page.For that i have used to create Azure multi-tenant directories and created Application with redirect-URI as per given link https://www.c-sharpcorner.com/article/azure-ad-authentication-for-mvc-web-application/ . Successfully integrated the code, while running i am getting microsoft sign on page after enter the username and password i am getting below error.

Error : AADSTS50020: User account '[email protected]' from identity provider 'live.com' does not exist in tenant 'SampleApp' and cannot access the application 'xxxxxxx-xxxxxxx'( in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account.

Answer 1

The 'outlook.com' is a personal account. You need to set your App Registration to use v2 endpoint to access personal account.

The Microsoft document which can help you is here .i.e., to force Azure AD to issue V2 access token we can set in its app manifest accessTokenAcceptedVersion value to 2.0