Entra ID Enterprise app SSO login using guest account fails AADST550105

Steven Gill 40 Reputation points
2025-08-06T12:19:15.4+00:00

Entra ID Enterprise app SSO login using guest account fails AADST550105

Screenshot 2025-08-06 130758

What could be causing this error?

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments No comments

Answer accepted by question author
Raja Pothuraju 47,840 Reputation points Microsoft Employee Moderator
2025-08-06T13:32:44.9966667+00:00

Hello Steven Gill,

The error AADST550105 occurs when a user is not assigned to the application under the Users and groups section, and the application has the "Assignment required" setting enabled.

When this setting is enabled, users must be explicitly assigned to the application—either directly or through a group—to gain access. If a user isn't assigned, they won't be able to sign in to the application in Microsoft Entra ID.

Resolution: Assign the guest user to the application under the Users and groups blade. For guidance, refer to the Quickstart: Assign users to an app.

To assign a user account to an enterprise application:

  1. Sign in to the Microsoft Entra admin center as at least a Cloud Application Administrator.
  2. Browse to Entra ID > Enterprise apps > All applications > Select the application
  3. In the left pane, select Users and groups, and then select Add user/group.
  4. On the Add Assignment pane, select None Selected under Users and groups.
  5. Search for and select the user that you want to assign to the application. For example, ******@contoso.com.
  6. Select Select.
  7. Select None Selected under Select a role and then select the role that you want to assign to the user. For example, Standard User.
  8. Select Select.
  9. Select Assign at the bottom of the pane to assign the user to the application.

Was this answer helpful?


0 additional answers

Sort by: Newest

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.