Users with certain email domains get an AADSTS50105 error ("application... configured to block users unless specifically granted access") when trying to log in via SSO, while other domains work fine.

All FAQ questions / Security and access

Answer

This points to Azure AD application-assignment configuration rather than an IFS-side setting — check with your Azure AD administrator that the affected users (and their specific domains) are actually included/assigned in the identity provider's application access configuration; also note that secondary URLs aren't currently supported when configuring an external identity provider in IFS, which can be a separate contributing limitation for multi-domain SSO setups.

Documentation-based answer. Confirm the product and release before applying it. This answer has not been verified in an IFS environment.

← Browse Security and access questions