3824818 - Error: AADSTS90072: Misconfigured application

The AADSTS90072 error occurs when there is a tenant restriction issue in Azure Active Directory (AAD). This error indicates that the user is attempting to sign in to a tenant they are not authorized to access. This guide provides steps to resolve this error.

The user gets the error: AADSTS90072: PassThroughUserMfaError. The external account that the user signs in with doesn't exist on the tenant that they signed into; so the user can't satisfy the MFA requirements for the tenant. This error also might occur if the users are synced, but there is a mismatch in the ImmutableID (sourceAnchor) attribute between Active Directory and Microsoft Entra ID. The account must be added as an external user in the tenant first. Sign out and sign in with a different Microsoft Entra user account.  , KBA , CON-CA-ADM-AUA-MMS , Manage Mobile Sign-On , CON-CA , Cross Applications , Problem