Voice for Teams: AADSTS50105: The signed in user is not assigned to a role for the application
Symptom
When an administrator attempts to accept an emailed invitation to access the 8x8 Voice for Teams admin portal, they receive an Error Processing Login message, and cannot log into the portal.
Applies To
- 8x8 Voice for Teams Admin Portal
- Microsoft Teams
- Microsoft Azure
Cause
This specific error is caused by user access configuration of the 8x8 Voice for Teams application in Microsoft Azure.
Resolution
There are two basic solutions in Azure:
- Add the affected user(s) to the 8x8 Voice for Teams application.
- Disable the 8x8 Voice for Teams application's user assignment requirement.
Add the affected user(s) to the 8x8 Voice for Teams application
From an administrator perspective, this is more work but ultimately more secure since it relies on per-user access control of the application.
- Log into the Azure Active Directory admin center.
- Navigate to Enterprise Applications > All applications and click on 8x8 Voice for Teams.
The following settings may already be applied:
- In 8x8 Voice for Teams > Manage > Properties:
- Set Enabled for users to sign in? to Yes.
- Set User assignment required? to Yes.
- Click Save if you've made any changes.
Note: Set Visible to users? to No if you don't want users to see the 8x8 Voice for Teams app in their Microsoft 365 apps list.
Now from the same app location, assign the users who require access to the 8x8 Voice for Teams admin portal:
- Navigate to 8x8 Voice for Teams > Manage > Users and groups.
- Click Add user.
- In Users and groups, click on the required users to select them, then click Select, and Assign.
Your user(s) should now appear in the application access list.
- Finally, the affected user must return to their 8x8 Voice for Teams Account invitation email and click Accept Invitation to complete the process and log into the 8x8 Voice for Teams admin portal.
Disable the 8x8 Voice for Teams user assignment requirement
This process is more direct and quick to implement than the process above.
Keep in mind that even if users can see the 8x8 application in their Microsoft 365 apps list, they cannot access the portal until they receive an invitation sent from the 8x8 Voice for Teams admin portal.
- Log into the Azure Active Directory admin center.
- Navigate to Enterprise Applications > All applications and click on 8x8 Voice for Teams.
- In 8x8 Voice for Teams > Manage > Properties:
- Ensure that Enabled for users to sign in? is set to Yes.
- Set User assignment required? to No.
- Click Save to complete the change.
Note: Set Visible to users? to No if you don't want users to see the 8x8 Voice for Teams app in their Microsoft 365 apps list.
- Finally, the affected user must return to their 8x8 Voice for Teams Account invitation email and click Accept Invitation to complete the process and log into the 8x8 Voice for Teams admin portal.