Microsoft error codes

UserNotBoundError - The Bind API requires the Microsoft Entra user to also authenticate with an external IDP, which hasn't happened yet.

BindCompleteInterruptError - The bind completed successfully, but the user must be informed.

Application {appDisplayName} can't be accessed at this time. Contact your administrator.

Microsoft Entra Regional ONLY supports auth either for MSIs OR for requests from MSAL using SN+I for 1P apps or 3P apps in Microsoft infrastructure tenants.

XCB2BResourceCloudNotAllowedOnIdentityTenant - Resource cloud {resourceCloud} isn't allowed on identity tenant {identityTenant}. {resourceCloud} - cloud instance which owns the resource. {identityTenant} - is the tenant where signing-in identity is originated from.

PasswordChangeIncorrectCurrentPassword

PasswordChangeInvalidNewPasswordWeak

PasswordChangeInvalidNewPasswordContainsMemberName

PasswordChangeOnPremComplexity

PasswordChangeOnPremSuccessCloudFail

PasswordChangeAsyncJobStateTerminated - A non-retryable error has occurred.

PasswordChangeAsyncUpnInferenceFailed

PasswordChangeNeedsToHappenOnPrem

PasswordChangeOnPremisesConnectivityFailure

PasswordChangeOnPremUserAccountLockedOutOrDisabled

PasswordChangeADAdminActionRequired

PasswordChangeUserNotFoundBySspr

PasswordChangePasswordDoesnotComplyFuzzyPolicy

PasswordChangeFailure

PartnerServiceSsprInternalServiceError

NgcKeyNotFound - The user principal doesn't have the NGC ID key configured.

NgcInvalidSignature - NGC key signature verified failed.

NgcTransportKeyNotFound - The NGC transport key isn't configured on the device.

NgcDeviceIsDisabled - The device is disabled.

NgcDeviceIsNotFound - The device referenced by the NGC key wasn't found.

KeyNotFound

Device used during the authentication is disabled.

InvalidRequestNonce - Request nonce isn't provided.

InvalidSessionKey - The session key isn't valid.

InteractionRequired - User account '{EmailHidden}' from identity provider '{idp}' doesn't exist in tenant '{tenant}' and can't access the application '{appid}'({appName}) in that tenant. This account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Microsoft Entra user account. This error is fairly common when you try to sign in to Microsoft Entra admin center by using personal Microsoft Account and no directory associated with it.

UserAccountSelectionInvalid - You see this error if the user selects a tile that the session select logic has rejected. When triggered, this error allows the user to recover by picking from an updated list of tiles/sessions, or by choosing another account. This error can occur because of a code defect or race condition.

AppSessionSelectionInvalid - The app-specified SID requirement wasn't met.

AppSessionSelectionInvalidSessionNotExist - Application requested a user session that doesn't exist. This issue can be resolved by creating new Azure account.

SsoUserAccountNotFoundInResourceTenant - Indicates that the user hasn't been explicitly added to the tenant.

Actual message content is runtime specific. Please see returned exception message for details.

InvalidApiRequest - Invalid request.

CredentialKeyProvisioningFailed - Microsoft Entra ID can't provision the user key.

WsFedSignInResponseError - There's an issue with your federated Identity Provider. Contact your IDP to resolve this issue.

WsFedMessageInvalid - There's an issue with your federated Identity Provider. Contact your IDP to resolve this issue.

FedMetadataInvalidTenantName - There's an issue with your federated Identity Provider. Contact your IDP to resolve this issue.