Office 365 Graph API authentication flow fails with the following error visible in the Okta dashboard:
AADSTS50020: User account <usename> from identity provider <identity provider> does not exist in tenant <tenant name> and cannot access the application <application ID> (Okta Microsoft Graph Client) in tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account.
- Office 365
- Provisioning
- Graph Client
- Error
The Microsoft Admin Account used to Authenticate the API does not belong to the Microsoft domain configured in the Office 365 Okta Integration General tab.
Authenticate the API with a Microsoft Account belonging to the Microsoft domain defined in the General tab of the Office 365 Okta Integration.
