Skip to main content
Solved

AADSTS50105: Your administrator has configured the application IFS - PROD to block users unless they are specifically granted ('assigned') access to the application

  • August 12, 2025
  • 1 reply
  • 120 views
M
Hero (Partner)
Forum|alt.badge.img+15

Hi All,

We’re in IFS Cloud 24R1.3 and using SSO for login. we have several users with different email domain. those users are unable to login to the application using SSO. I’m not sure how to configure IFS application to solve this AADSTS50105 error.


I would greatly appreciate any opinions or suggestions you may have.

Thank you in Advance!

Best answer by Dihan Perera

Hi ​@MitDenukN 

This error seems to be related to Azure AD permissions, check with your Azure Admin if the necessary permissions are granted for the specific users, more specifically if the separate domains are included in the identity provider.

Below article should also help :)
IFS Cloud SSO with MUlitiple domains | IFS Community
Configuring Windows Azure - Technical Documentation For IFS Cloud

Also note that Secondary URLs are not currently supported when creating an external IDP. This is a limitation.

1 reply

D
Hero (Employee)
Forum|alt.badge.img+8
  • Dihan Perera
  • Hero (Employee)
  • Answer
  • August 12, 2025

Hi ​@MitDenukN 

This error seems to be related to Azure AD permissions, check with your Azure Admin if the necessary permissions are granted for the specific users, more specifically if the separate domains are included in the identity provider.

Below article should also help :)
IFS Cloud SSO with MUlitiple domains | IFS Community
Configuring Windows Azure - Technical Documentation For IFS Cloud

Also note that Secondary URLs are not currently supported when creating an external IDP. This is a limitation.

www.linkedin.com/in/dihan-perera-8b199118b
    Terms & ConditionsCookie settingsAccessibility statement