AADSTS50058 — "Session information is not sufficient for single-sign-on." The application
asked Entra ID to authenticate silently (e.g. prompt=none or a hidden iframe/refresh
attempt), but there is no signed-in user session that satisfies the request. This is a normal
signal in the OpenID Connect flow — the correct response is an interactive sign-in — but
seeing it constantly indicates a session or cookie problem.
AADSTS50058
Silent sign-in failed: no signed-in user
What it means
Common causes
The user's Entra session expired or was signed out, and the app tried to renew silently.
Third-party cookie blocking (browser privacy defaults) prevents the hidden-iframe SSO check from seeing the session cookie.
The session exists for a different account/tenant than the silent request specified.
Conditional Access or session policies require fresh interaction that a silent request cannot satisfy.
How to fix it
In application code, treat this error as 'interaction required': catch it and trigger an interactive sign-in (MSAL surfaces this as an interaction-required condition).
For SPAs, use the authorization code flow with PKCE and MSAL.js 2.x+ instead of implicit-flow iframe renewals, which break under third-party cookie blocking.
If it floods your logs, correlate with sign-in frequency / session lifetime Conditional Access policies — aggressive re-auth settings multiply silent-auth failures.