Fixing AADSTS50020

AADSTS50020: User account '{EmailHidden}' from identity provider 'https://sts.windows.net/00000000-0000-0000-0000-000000000000/' does not exist in tenant 'Huntress CSP' and cannot access the application '3a8b631c-cbce-4c51-a5af-1d3bc0a14d69'(Huntress Security Platform) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account.

Ensure the HuntressAdmin@domain.tld is in BOTH the AdminAgents group and if required suitable security groups for GDAP access in to tenants, e.g., "User Administrator Group".

• After you have finished this, please head back to your Huntress Dashboard and head to your integrations tab. 
• Find the M365 tab and click the pencil icon to edit your mappings. 
• Choose any mapping you like and click the x to unmap it. 
• Important to be on the safe side; leave it unmapped for 6 or 7 minutes, it will NOT work if it is unmapped for less than 5 minutes
• After you have allowed at least 5 minutes to pass please remap that tenant. 
• If you take a look at any of your mapped tenants and click the "view all users" button you should see user data now being populated. If you see this, then you have successfully corrected the issue!
  • If you see Users and/or data ingesting, please IGNORE the red banners. As of 7/28 we are working on a fix to clear those that should be rolled out in the near future. 
  • If you do not see any users wait about an hour and check back in. If after an hour there are still no users, please open a ticket with support. 
• Check back in a few hours, and you should see data starting to be ingested. If you do not see any data being ingested after 24 hours, please open a ticket with support.