Fix AADSTS50020

TEAM: Huntress Managed Identity Threat Detection and Response (ITDR, formerly MDR for Microsoft 365)
ENVIRONMENT: Microsoft Azure Portal
SUMMARY: Error AADSTS50020 often indicates that the User account from the identity provider does not exist in the tenant

AADSTS50020: User account '{EmailHidden}' from identity provider 'https://sts.windows.net/00000000-0000-0000-0000-000000000000/' does not exist in tenant 'Huntress CSP' and cannot access the application '3a8b631c-cbce-4c51-a5af-1d3bc0a14d69'(Huntress Security Platform) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account.

Ensure the HuntressAdmin@domain.tld user is a member of BOTH:

• The AdminAgents group.
• A security group associated with the respective Customer and with sufficient AD Roles for GDAP access into tenants, e.g., "L3 Support".

Once confirmed, please return to the Huntress Microsoft 365 Integration page and `Reauthorize` following the integration procedure.