Of course, we can use incognito mode to get them logged in. The sign in works on every browser BUT Edge. ----- If the answer is helpful, please click "Accept Answer" and kindly upvote it. PS C:\> Connect-AzureAD -Confirm. Apologies for the confusion. You can remove the guest from Manage Team> Members> and click the "X" to remove the guest. So I conclude that this has something to do with my Edge/Microsoft account or something to do with the sync that is on. PowerShell. End user cannot sign in to the to app. click on the user account click on licenses and app and check the teams again. Certificate of Proficiency or a G. If the user doesn’t exist in the tenant, add them to your Azure AD. The account needs to be added as an external user in the tenant first. To resolve the issue, check if the user account exists in Azure AD Tenant. com' from identity provider 'live. Please visit your local ITS Walk-up Support location and request installation of the latest version Edge, Google Chrome, or Safari. Message: AADSTS90072: User account '@gmail. The account needs to be added as an external user in the tenant first. The user who has signed into their own tenant (identified by the “from identity provider X” section of the error) succesfully, is trying to access a resource tenant (identified by the “does not exist in tenant Y” section of the error) and AAD cannot find any Guest user. com' does not exist in tenant 'Microsoft Services' and cannot access the application '95de633a-083e-42f5-b444-a4295d8e9314' (Microsoft Whiteboard Services) in that tenant. How can I link both accounts so I can access the team "Acts of assistance" on my phone? Thanks,. Select Properties. The account needs to be added as an external user in the tenant first. Step 3: Under the Assignments > Cloud apps or actions section. Sign out and sign in. g. My people are just super confused on why the client cannot use the send secure feature to send mail from their e-mail addresses to our e-mail. Harassment is any behavior intended to disturb or upset a person or group of people. com'Hi @Kia Marie Añes , . Message: AADSTS90072: User account ' [email protected]' does not exist in tenant '. Request Id: e7a27493-3d1c-. Answer. エラーコードはaadsts90072でした。 以下エンドレスループです。 ググったところ，ウィンドウズ10を再インストールすれば直るというような記事を見つけましたが，その他の方法は見当たりませんでした。 aadsts90072 Hello, An encrypted email with do not forward function was sent to the external user which is also using Office 365, however, they are unable to open the message and encountered the following error: Enter your email address to subscribe to this blog and receive notifications of new posts by email. このエラーは、Microsoft Entra ID がアプリケーションに対する SAML 応答の作成を試みているときに返されます。. I am trying to setup OAuth with Azure Active Directory with next-auth. The website login used an azure portal, so I think Edge is. com' does not exist in tenant 'Gemeente Amsterdam' and cannot access the application '8c59ead7-d703-4a27-9e55-c96a0054c8d2'(My Profile) in that tenant. com) or uses an existing Microsoft account and afterwards a guest account is created in our. Error: AADSTS90072. The account needs to be added as an external user in the tenant first. Microsoft does not guarantee the accuracy of this information. Create a New User Profile . com' from identity provider 'live. Hello Emma, Thanks for your prompt reply. AADSTS90072: User account 'abcd@Stuff . - Under the User Access. SAML 応答では NameID 要求または NameIdentifier が必須であり、Microsoft Entra ID が NameID 要求のソース属性を取得できなかった場合に、このエラーが返され. The command prompts you for a username and password for the tenant you want to connect to. Now, to go back to login page again, user has no other option than. The account needs to be added as an external user in the tenant first. com” Unsandboxed plugin access – Allow – ADD – “login. com Users, need help? Get Supplier e-Business support. Invitation message: Select the Send invite message checkbox to send an invitation message. Why am I having to re-authenticate every 24 hours? [email protected] the permissions I added don't need admin consent, so I can consent by the first time I login. For more information, please visit configuring external identities. Request Id: 472248bb-3a01-4a9f-9f57-. 以下のエラーが表示される場合には「 KDDI Business ID-Office 365 連携. Correlation Id: cb55224b-0901-405b-9e7a-1c2bb78cf719. Hi, we are getting this error on our of our SharePoint sites. AADSTS90072-グループのSharePointにアクセスできません. This command connects the current PowerShell session to an Azure Active Directory tenant. com' doesnot exist in tenant 'tenant Group' and cannot access the application '00000. Message: AADSTS50020: User account '*****@live. Admission to Orange Coast College is granted to those applicants who meet at least one of the following requirements: High school graduation. You may check the contact numbers here. com' does not exist in tenant 'CSU Students' and cannot access the application '0a14501e-1816-46a7-bc7f-daaa484fb9a8'(StudentCAS) in that tenant. com' does not exist in tenant 'Microsoft Services' and cannot access the application '0000000c-0000-0000-c000-000000000000'(Microsoft App Access Panel) in that tenant. I'm using webex Team with my client user (vistaoilandgas), but when I enter the account in webex app, it seems that it try to login with a different user account. Hi there, We recently made improvements on Microsoft Authentication, and, not only supporting personal account, we support the full MSAL system, with V2 authorization endpoint, which might help you in what you want to achieve. Threats include any threat of suicide, violence, or harm to another. Given the situation, the issue may be caused by the corrupt profiles. Message: AADSTS90072: User account 'atamakov@outlook. Threats include any threat of suicide, violence, or harm to another. ; Turn off guest access. Click on the Organisational account you added previously. Message: AADSTS90072: User account 'xxxxxxx' from identity provider 'live. COM is being automatically logged in. com' does not exist in tenant 'Microsoft Services' and cannot access the application '0000000c-0000-0000-c000-000000000000'(Microsoft App Access Panel) in that tenant. The account needs to be added as an external user in the tenant first. ----- If the answer is helpful, please click "Accept Answer" and kindly upvote it. ' from identity provider '. This can be done via the Azure portal: Go to Azure Active Directory > Users. Drishti Maharaj 31. Set the registry to focus Outlook Autodiscover on certain sources of information only. '(Office 365 SharePoint Online). As you mentioned in the above post, "Passing version number along with the certificate name in DownloadCertificate solved this issue. The account needs to be added as an external user in the tenant first. com' does not exist in tenant 'xxxxx' and cannot access the application '00000003-0000-0ff1-ce00-000000000000'(Office 365 SharePoint Online) in that tenant. com' from identity provider 'live. When On, team owners and members can create private channels that contain a subset of team members. Message: AADSTS90072: User account 'XXXXXXXXXXXXXX' from identity provider 'live. In the JSON code, find the signInAudience setting. Note: if View by is set to Category, click user accounts first, and then click Credential Manager. I contacted to support, and they found the solution! The problem is, you have registered your account as personal from your mobile device, which means, you can not use desktop app. The command prompts you for a username and password for the tenant you want to connect to. Please try to remove/re-add the guest user from the Team and check if the issue persists. Solution 2: Exclude Guest and External Users. then you need to login with the admin account and go to the user or your useraccount. Set all of these to 1: excludescplookup. A further prompt will appear asking you to disconnect from the organisation. According to the comment for this tutorial, for the resources, I changed to App ID URL. Email: Enter the email address for the guest user you're inviting. By signing in you allow 'my business partner'-my. Copy info to clipboard Request Id: e89e1fba-cbac-432d-b247-96671d3b8400 Correlation Id: 631c8d83-d5f2-4691-ad38-6424e5621a50 Timestamp: 2020-08-03T02:02:56Z Message:…AADSTS90072: User account 'abcd@Stuff . A user asks why they cannot open an encrypted email with do not forward function sent by a sender from a different tenant in Office 365. com' does not exist in tenant '. AADSTS90072 . The account needs to be added as an external user in the tenant first. Contact Admissions & Records at arinfo@occ. Error Code Description Client Action : invalid_request : Protocol error, such as a missing required parameter. '(Office 365 SharePoint Online). Select Properties. b9f662b42c2dc740. com' does not exist in tenant 'Microsoft Services' and cannot access the application 'a85cf173-4192-42f8-81fa-777a763e6e2c'(Windows Virtual Desktop Client) in that tenant. . To make sure that your app registration isn't a single-tenant account type, perform the following steps: In the Azure portal, search for and select App registrations. . Scroll down to the Tenant ID section and you can find your tenant ID in the box. . com. Office 365にテナントとしてすでに登録されているドメイン名と一致する個人のMicrosoftアカウントを使用すると、いくつかのAADSTSエラーが発生します。. - Select the Windows Credentials option. AADSTS90072: User account 'theodorbrak@gmail. Step 1: Go to Azure Dashboard > Conditional Access. It logs in with account A001 and get this error: AADSTS90072: User account '{EmailHidden}' from identity provider '{A001's email domain}' does not exist in tenant '{Tenant A}' and cannot access the application 'xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx'({App001's name}) in that tenant. The account needs to be added as an external user in the tenant first. aadsts90072 エラーの考えられる原因は次のとおりです。 テナントにアカウントが存在しません – ユーザーがサインインしようとしている外部アカウントがサインインしたテナントに存在しない場合、エラーが表示される可能性があります。Issue:AADSTS90072: User account ‘XXXXX’ from identity provider ‘XXXXX’ does not exist in tenant ‘XXXXXX’ and cannot access the application ‘XXXXX'(Azure DevOps) in that tenant. Root Cause and Solution: This is because The user account trying to access the SharePoint resource is not present in the Azure AD Tenant. com will. To clarify, AADSTS stands for Azure Active Directory (Azure AD) security token service (STS). Looks like you would resolve this issue just by inviting admin@noorulqamar. Contact the IT department of the company and add your account as guest user to the tenant of the company via the steps in this article: Add guest users to your directory in the Azure portal. microsoftonline. Apr 25, 2022, 2:27 AM. In this section, you're inviting the guest to your tenant using their email address. . Message: AADSTS90072: User account '@gmail. A self-service sign-up user flow defines the series of steps the user will follow during sign-up, the identity providers you'll allow them to use, and the user attributes you want to collect. Because the user account was deleted and created in the home tenant, the NetID value for the account will have changed for the user in the home tenant. Please wait 1-2 hours for the action to take effect. E. com' doesnot exist in tenant 'tenant Group' and cannot access the application '00000. Hi, we are. When our users try and log into their portal, with the accounts provided, our web browser immediately tries to log them with their accounts from our tenant. Verification examples. Even we can successfully login at and we can use onedrive and the. ' and cannot access the application in that tenant. microsoftonline. You can also refer to the method in this link to see if it can solve the problem for you. Invitation is blocked due to disabled Microsoft B2B Cross Cloud Worker application. The account needs to be added as an external user in. Disable anonymous join in the organization meeting settings. : Fix and resubmit the. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services,. A prompt will appear asking if you are sure. Click on + New guest user. "AADSTS90072: User account 'xxxxxx' from identity provider 'live. Select the following button to populate the diagnostic in the Microsoft 365 admin center:. The Confirm parameter prompts you for confirmation. Then please resend a guest invitation and let the user redeem the invitation. (Except US Public Holidays) Estimated Response Time – within 1 Business Day. com and look at outlook online, I can read this e-mail FINE. You can also refer to the method in this link to see if it can solve the problem for you. . Sign out and sign in with a different Azure AD user account. ' does not exist in tenant '. Attainment of 18 years of age and who. com to use your basic profile (name and email address) in accordance with their privacy statement. we had the same problem, maybe because of the update MS did on the 29 of jan. 別のプライマリメールに切り替える. Please feel free to reply if you have any concerns about this question. com' does not exist in tenant 'xxxx' and cannot access the application 'xxx' (xxx register) in that tenant. edu or call our Answer Center at (714) 432-5072. sharepoint. This browser is no longer supported. com' does not exist in tenant 'Intel Corporation' and cannot access the application '80ebef2a-2f2f-4fd6-93c8-b80a651479a2'(IntelCorpB2C_IAP_14066) in that tenant. We've included some links that can help you access the app or figure out why you can't. We have Teams setup for our office and users have. Answer Igor_Araújo Independent Advisor Replied on January 24, 2022 Report abuse Hello, Lg_202 I am Igor and I will be glad to help you with this question :) Please try to follow. I get the following error: Request Id: 63a0cf90-b4ad-423d-abdd-3ef34c273000 Correlation Id: ab8fa3d9-7c0c-44bf-9414-16a2c36a0832 Timestamp: 2019-02-22T16:03:42Z Message: AADSTS900561: The endpoint Message: AADSTS90072: User account '' from identity provider 'live. The account needs to be added as an external user in the tenant first. Sign out and sign. If I go into portal. " Press Ok, Then Finish. by Henderson Jayden Harper Updated on October 4, 2023 Affiliate Disclosure You can run into the AADSTS90072 error when you attempt to log in to an account that is not in the tenant. We have a provider that we do work with, with their own Azure tenant. com ' from identity provider 'rovider. com' does not exist in tenant '. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. This command connects the current PowerShell session to an Azure Active Directory tenant. com' from identity provider 'live. uk' from identity provider 'live. 彼はそれを削除してもう一度それを加えた-助けなかった. Click on "Disconnect". But before creating a new profile, you must export your [email protected]. I'm using webex Team with my client user (vistaoilandgas), but when I enter the account in webex app, it seems that it try to login with a different user account. Clear the box next to "Use Cached Exchange Mode" and click "Next. Hi All, Is it possible to handle external access to Microsoft Teams through Okta? By default when inviting an external user (e. Regards,Message: AADSTS90072: User account 'soulhuga80@hotmail. Is the O365 secure mail feature not meant to pass e-mail from an e-mail address on one tenant to an e-mail address on another tenant? If it is truly working as intended, I'll pass that along. Sign out and sign in again with a different. Also, please contact your organization administrator to run the following tests to detect issues with your account. PS C:> Connect-AzureAD -Confirm. Replaces Azure Active Directory. Select the following button to populate the diagnostic in the Microsoft 365 admin center: Run Tests. Harassment is any behavior intended to disturb or upset a person or group of people. I dont know how to change this behavior. Create a Microsoft Entra test user. Hello @Scott Graham . We wish we could be of more help. Request Id: e7a27493-3d1c-. If the user doesn’t exist in the tenant, add them to your Azure AD. The account needs to be added as an external user in the tenant first. To learn about all of the properties and settings that you can include when you invite an external user, see How to create and delete a user. Received a GET request. MYCOMPANY. Now, to go back to login page again, user has no other option than pressing back arrow or closing the window. AADSTS90072 is an error code that occurs when the user account that you sign. I was sent an encrypted e-mail. If you still experience issues, contact customer support below. Please help. john. Sign in to the Microsoft Entra admin center as at least a User. Message: AADSTS90072: User account '**' in that tenant. Threats include any threat of suicide, violence, or harm to another. com' from identity provider 'live. In other words, either the guest user was not added (invited) to the Azure AD environment, or the external user did not accept the invitation yet. The account needs to be added as an external user in the tenant first. The account needs to be added as an external user in the tenant first. Microsoft does not guarantee the accuracy of this information. 【KDDI Business ID】. I can sign in through the account I registered the app under, but…For example, once the contractor hits CONNECT in the AnyConnect app, [email protected] Hi, I am using teams with my email university: . AADSTS90072: User account 'abcd@Stuff . . Scroll down to the Tenant ID section and you can find your tenant ID in the box. AADSTS90072: User Account from identity provider does not exist in tenant and cannot access application. Here is the article for your reference: Leave a Teams free organization. Threats include any threat of suicide, violence, or harm to another. Open Windows Settings > Accounts > Access work or school. com. . It logs in with account A001 and get this error: AADSTS90072: User account ' {EmailHidden}' from identity provider ' {A001's email domain}' does. Sign in to the Azure portal. from the State of California. E. ' in that tenant. Still failing to connect to the new tenant when I try to add the new mailbox on the new tenant. The account needs to be added as an external user in the tenant first. This web page explains the issue and solution of AADSTS90072, which occurs when a user account from an identity provider does not exist in the Azure DevOps tenant and cannot. Also, please contact your organization administrator to run the following tests to detect issues with your account. We are currently providing external access to a SharePoint modern sub-site and managing access via invites which are sent once we add them to a group. エラー aadsts90072 の考えられる原因は次のとおりです。 テナントにアカウントが存在しません – ユーザーがログインしようとしている外部アカウントが、ログインしているテナントに存在しない場合、エラーが発生する可能性があります。A cloud computing platform and infrastructure for building, deploying and managing applications and services through a worldwide network of Microsoft-managed datacenters. intel. Accept the Invitation: Once the invitation is sent, [email protected]@gmail. Sign out and sign in again with a different Azure Active Directory user account. It doesn't prompt me to enter account B001 at all. Message: AADSTS90072: User account 'theodorbrak@gmail. But I am still not able toStack Overflow Public questions & answers; Stack Overflow for Teams Where developers & technologists share private knowledge with coworkers; Talent Build your employer brand ; Advertising Reach developers & technologists worldwide; Labs The future of collective knowledge sharing; About the companyAADSTS7000112: Application '1fec8e78-bce4-4aaf-ab1b-5451cc387264'(Microsoft Teams) is disabled. The account needs to be added as an external user in the tenant first. com' does not exist in tenant 'Microsoft' and cannot access the application 'ccc737ba-4bcc-4a71-8e38-f0e86310d5e8' in that tenant. 私はそれをインシレンゴモードでアクセスしようとしました-同じエラーが. Support Hours: Monday to Friday 7:30 – 17:30 EST. AADSTS90072 - Cannot access the application. SSOにて使用する認証方法を変更した際に設定が反映されない場合があります。. ' from identity provider '. Create an application with User. A cloud computing platform and infrastructure for building, deploying and managing applications and services through a worldwide network of Microsoft-managed datacenters. com' from identity provider 'live. Message: AADSTS90072: User account 'hasanuyar101620. First please sign in Outlook Web App(OWA), make sure that you can open the encrypted email and send encrypted emails. Admission to Orange Coast College is granted to those applicants who meet at least one of the following requirements: High school graduation. If you have extra questions about this answer, please click "Comment". To do so, in the Microsoft Teams. Click on View or Change Existing Email Accounts. AADSTS90072-グループのSharePointにアクセスできません. The account needs to be added as an external user in the tenant first. Here's how to Fix AADSTS90072 User Account from identity provider does not exist. com' does not exist in tenant 'Microsoft Services' and cannot access the application '0000000c-0000-0000-c000-000000000000'(Microsoft App Access Panel) in that tenant. An article about issue when an external user accepts a SharePoint Online invitation by using another account and how to resolve it. 您好:註冊後登入Teams會出現AADSTS90072錯誤連結，且收到別人寄的連結無法順利登入，請協助排除。 謝謝!I followed this tutorial to generate an access token from client app for target app. ' and cannot access the application in that tenant. This invitation cannot be accepted by the current signed in user. Basics. If multi-factor authentication is enabled for your credentials,. com' does not exist in tenant 'InMobi' and cannot access the application '601336218574914218_mindtickle'(MindTickle) in that tenant. Please feel free to reply if you have any concerns about this question. And, if you have any further query do let us know. COM, and the Azure SAML. Instead of the account we want him to login with, JSMITH. 彼はそれを削除してもう一度それを加えた-助けなかった. Select New user > Invite external user from the menu. Select the name of your app registration. . com' does not exist in tenant 'Microsoft Services' and cannot access the application '0000000c-0000-0000-c000-000000000000'(Microsoft App Access Panel) in that tenant. 7. The account needs to be added as an external user in the tenant first. D. Message: AADSTS90072: User account 'elenarepina@Stuff . com' does not exist in tenant '. Management Portal: - In your Azure AD Tenant, go to the Configure Tab on the top. Now, to go back to login page again, user has no other option than. com' from identity provider 'live. Error: AADSTS90072. with email john. Request Id: 7d71c604-7ef1-4c19-86ae-a39ced553300 Correlation Id: 7a7e07dc-3a98-418e-a300-d2b65f378e8d Timestamp: 2021-09-11T05:31:53Z Message: AADSTS90044: National Cloud Request Process Switched off. com' does not exist in tenant 'XX' and cannot access the application. Example 1: Partner has implemented Microsoft Entra multifactor authenticationAADSTS70008: The provided authorization code or refresh token has expired due to inactivity. The account needs to be added as an external user in the tenant first. When a non-Microsoft recipient (e. Apr 25, 2022, 2:27 AM. Replaces Azure Active Directory. Hi @AmanpreetSingh-MSFT , thank you for your reply . Click Profile. A Microsoft agent replies that the sender's. AADSTS90072: User account '_____' from identity provider '_____' does not exist The sign in works on every browser BUT Edge. In Windows 10 I try to connect to host using Cisco AnyConnect Secure Mobility Client. エラー aadsts90072 の考えられる原因は次のとおりです。 テナントにアカウントが存在しません – ユーザーがログインしようとしている外部アカウントが、ログインしているテナントに存在しない場合、エラーが発生する可能性があります。 AADSTS90072: User Account from identity provider does not exist in tenant and cannot access application Drishti Maharaj 31 Reputation points 2022-04-25T09:27:18. Click Disconnect. In the upper right corner, click your account. After restrictring our network using the firewall we have trouble signing into our emails: We get the following messageI get the following error: Request Id: 63a0cf90-b4ad-423d-abdd-3ef34c273000 Correlation Id: ab8fa3d9-7c0c-44bf-9414-16a2c36a0832 Timestamp: 2019-02-22T16:03:42Z Message: AADSTS900561: The endpointMessage: AADSTS90072: User account '' from identity provider 'live. Timestamp: 2020-09-14T19:58:26Z. D. Sign out and sign in again with a different Azure Active Directory user account Solution: User account […] When a guest user accepts an invitation, the user's LiveID attribute (the unique sign-in ID of the user) is stored within AlternativeSecurityIds in the key attribute. You may also reach out through live chat or open a web case here. They have provided guest accounts for a few of our users. The Cisco AnyConnect embedded browser gives us no way to log him out of JOHNSMITH@VENDOR. George Weston Limited is a Canadian public company, founded in 1882. I have registered an app and defined the delegated permission needed to create a user user the microsoft graph API. If any additional assistance is needed, we will be happy to jump in and take a look. caa20004 aadsts90072: user account from identity provider does not exist in tenant Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Request Id: a2449433-0397-48a4-8c12-ef95633f4600. azure. AADSTS90072 - Cannot access the application. good luck! 0 Likes. com' from identity provider 'live. . 次に、問題のある電子. The user now is getting a AADSTS90072 error: Can you please advise on how to resolve it? Should this user be removed from the link invite, as a Visitor to the Workspace and re-send the Workspace invited as Visitor? Btw, not sure why the user is trying to access with email changed with suffix "onmicrosoft. Here are steps to replicate the issue: Log into Tenant A's portal (portal. com' does not exist in tenant 'VMWare, Inc' and cannot access VMWare Boxer in that tenant. The user who has signed into their own tenant (identified by the “from identity provider X” section of the error) succesfully, is trying to access a resource tenant (identified by the “does not exist in tenant Y” section of the error) and AAD cannot find any Guest user. com”. Request Id: 7d71c604-7ef1-4c19-86ae-a39ced553300 Correlation Id: 7a7e07dc-3a98-418e-a300-d2b65f378e8d Timestamp: 2021-09-11T05:31:53Z Message: AADSTS90044: National Cloud Request Process Switched off. 6 answers. Best wishes, Javier Salcedo. com' does not exist in tenant 'Default Directory' and cannot access the application '05b21c4c-79f6-489d-a727-5ac1bf3b6a7b' (abc) in that tenant. Click Yes. . External users are unable to login with partial SSO enabled. I removed the user from the group ofMessage: AADSTS90072: User account [REDACTED] from identity provider [REDACTED] does not exist in tenant 'Intel Corporation' and cannot access the application '00000003-0000-0ff1-ce00-000000000000'(Office 365 SharePoint Online) in that tenant. AADSTS90072: User account '' from identity provider 'live. com' does not exist in tenant 'Microsoft' and cannot access the application '5e3ce6c0-2b1f-4285-8d4b-75ee78787346'(Microsoft Teams Web Client) in that tenant. Most Common Errors Encountered in MigrationWiz while using Modern Authentication for EWS in Exchange OnlineI am posting this because I sat on a Teams call with half-a-dozen people for several hours to come to this resolution and Google results were completely unhelpful. The account needs to be added as an external user in the tenant first. If the answer is helpful, please click " Accept Answer " and kindly upvote it. Regards, Message: AADSTS90072: User account '[email protected] details If you contact your administrator, send this info to them. com' from identity provider 'live. 2. You'll need to accept the invitation using a different account. @Kumar Balaji, Madan I am checking to see if this issue is resolved or not. Rarely, you might see this message: “This action can't be completed because the Microsoft B2B Cross Cloud Worker application has been disabled in the invited user’s tenant. Sign in to the Microsoft Entra admin center as at least a User administrator. Compare the NetID value. The account needs to be added as an external user in the tenant first.