Who is this article for?

Users who encounter the error when signing in.

IT Administrator permissions are required to resolve the issue.

When logging into the application through SingleSign-On (SSO), you may see one of two "AADSTS50105" error messages. This article explains what causes the issue and how to resolve it.

1. Issue

When attempting to sign in using SSO, you encounter one of the following errors:

• "AADSTS50105 - The signed in user is not assigned to a role for the application."
• "AADSTS50105:  Your administrator has configured the application [application name] ('xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx') to block users unless they are specifically granted ('assigned') access to the application. The signed in user '[user name]' is blocked because they are not a direct member of a group with access, nor had access directly assigned by an administrator. Please contact your administrator to assign access to this application."

This error message appears because your user has not been granted access to the application by your Microsoft Entra ID administrators. 

2. Solution

To resolve this issue, escalate it to your IT Administrators who can grant you the necessary permissions.

3. Further reading

• Error AADSTS50105 - The signed in user is not assigned to a role for the application (Microsoft Learn)