AADSTS50034

User account does not exist in the directory

Last reviewed 2026-07-18 by the Just Software engineering team · also seen as 50034, user account does not exist in directory

What it means

AADSTS50034 — "The user account does not exist in the directory. To sign into this application, the account must be added to the directory." The username entered does not resolve to any user object in the tenant that was asked. Unlike AADSTS50020 there is no successful upstream authentication — the lookup itself failed.

Common causes

  1. Typo in the username, or the user entered an email alias / SMTP address that is not their UPN.

  2. The request targeted the wrong tenant (single-tenant authority pointing elsewhere, or the user picked the wrong account entry).

  3. The account was deleted, or in hybrid setups has not (yet) synced to Entra ID.

  4. Sign-in with an alternate email is expected but 'email as an alternate login ID' is not configured.

How to fix it

  1. Verify the exact UPN: Get-MgUser -UserId user@domain.com (Microsoft Graph PowerShell) or search in Entra admin center > Users.

  2. In hybrid environments, confirm the user is in scope for Entra Connect/Cloud Sync and that the last sync succeeded.

  3. Check the authority/tenant in the failing request matches the tenant where the user lives.

  4. If users habitually sign in with a secondary email, either educate on UPN sign-in or configure email as an alternate login ID.

An unhandled error has occurred. Reload 🗙