3509946 - Error "AADSTS50105" occurred when signing in a SAP BTP application through Azure AD Idp.

Azure AD has been configured as Identity Provider for the application Single Sign-On (SSO) in SAP BTP Cockpit.
Following errors occurred while sign in a SAP BTP application.

Sorry, but we're having trouble sign you in.

AADSTS50105: Your administrator has configured the application XXX ('XXXXXXXX-XXX-XXX-XXX-XXXXXXXXXXXX') to block users unless they are specifically granted ('assigned') access to the application. The signed in user 'xxxxx@yyyyy.com' is blocked because they are not a direct member of a group with access, nor had access directly assigned by an administrator. Please contact your administrator to assign access to this application.

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."

• SAP Business Technology Platform
• Cloud Foundry environment

AADSTS50105, SSO, BTP , 400, Bad Request, login.microsoftonline.com, blocked, sign in , KBA , BC-CP-CF-SEC-IAM , UAA, Authentication, Authorization, Trust Mgmnt , Known Error