← cd ~/errors
// entra id sign-in errors
Consent and permissions errors
The app needs permissions that haven't been granted, or the user isn't allowed to consent. Usually fixed in the Enterprise App or the consent settings.
How to investigate
- Open the Enterprise App and check Users and groups (assignment) and Permissions (consent).
- Check whether user consent is allowed for this kind of permission, or whether an admin needs to grant it.
- Look at the app's requested permissions in the sign-in request or app registration.
Common errors (5)
- AADSTS65001 DelegationDoesNotExist
- AADSTS65004 UserDeclinedConsent
- AADSTS90094 AdminConsentRequired
- AADSTS650056 Misconfigured application
- AADSTS50105 EntitlementGrantsNotFound
More codes from Microsoft's reference (15)
- AADSTS28002
- AADSTS28003
- AADSTS50015 ViralUserLegalAgeConsentRequiredState
- AADSTS50150
- AADSTS52004 DelegationDoesNotExistForLinkedIn
- AADSTS65002
- AADSTS70005 UnsupportedResponseType
- AADSTS90008 TokenForItselfRequiresGraphPermission
- AADSTS90095
- AADSTS90099
- AADSTS650054
- AADSTS650057
- AADSTS700022 InvalidMultipleResourcesScope
- AADSTS700023 InvalidResourcelessScope
- AADSTS9002341