AADSTS50128 — "Invalid domain name - No tenant-identifying information found in either the request or implied by any provided credentials." The request needed to be routed to a tenant, but the domain name or tenant identifier provided does not correspond to any Entra tenant. Typically a configuration typo rather than a user error.
AADSTS50128
Invalid domain name — no tenant-identifying information
What it means
Common causes
A misspelled domain or tenant name in the app's authority URL (e.g.
login.microsoftonline.com/contoso.comwith a typo).The custom domain has not been added and verified in the tenant.
The user entered a username with a domain that is not registered in any tenant (personal typo domains like
@gamil.com).
How to fix it
Verify the domain exists in the tenant: Entra admin center > Settings > Domain names (or
Get-MgDomain).Prefer the tenant GUID over a domain name in authority URLs — it cannot go stale:
https://login.microsoftonline.com/<tenant-guid>.Check the exact username/domain string in the failing request for typos before assuming configuration problems.