azureblog.co.uk
← cd ~/errors
// entra id sign-in error · accounts, passwords and sessions

AADSTS500208

What Microsoft says

The domain is not a valid login domain for the account type - This situation occurs when the user's account does not match the expected account type for the given tenant. For instance, if the tenant is configured to allow only work or school accounts, and the user tries to sign in with a personal Microsoft account, they will receive this error.

How to fix it

Microsoft doesn't publish a specific fix for this code beyond the description above. This site groups it under accounts, passwords and sessions, based on that description, so start with the steps below.

How to investigate

  1. Confirm which account the user actually signed in with. A personal account or the wrong tenant causes many of these.
  2. Check the user object: enabled, licensed, in the right tenant, and with no recent password change or reset.
  3. Look at the sign-in logs over a few days for a pattern, such as repeated failures from one IP address.
  4. Search the sign-in logs for the request ID or correlation ID from the troubleshooting details on the error page.

Tools that help

Common errors: Accounts, passwords and sessions

The description is quoted from Microsoft's error code reference. The grouping and investigation steps are this site's guidance.