Error AADSTS50105 encountered when logging into Atlassian cloud
Platform Notice: Cloud Only - This article only applies to Atlassian apps on the cloud platform.
Summary
A managed account enforced with SSO through Microsoft Entra ID may encounter the AADSTS50105 error code.
The managed account is logging into the Atlassian cloud.
The user is automatically redirected to the Microsoft login page for authentication.
The user can authenticate with the Microsoft UPN and password.
The following error is returned to the user.
AADSTS50105: Your administrator has configured the application Atlassian Cloud
('<APPLICATION_ID>') to block users unless they are specifically granted ('assigned')
access to the application. The signed in user '<email address>' is blocked because
they are not a direct member of a group with access, nor had access directly assigned
by an administrator. Please contact your administrator to assign access to this application.Cause
The Entra ID account has not been granted permission to authenticate via the Entra ID application configured for SSO with Atlassian Access.
Resolution
In environments where users cannot independently modify Entra ID settings (e.g., critical infrastructure organizations), coordinate with IT administrators or domain authorities to resolve this issue. Use Option 1 to allow broad access for all users in Entra ID, or use Option 2 to selectively grant access to specific users or groups facing the AADSTS50105 error:
Option 1: Allow anyone in Entra ID to authenticate via the Atlassian cloud application
Navigate Enterprise Application > Atlassian cloud
Open the Properties settings
Set the "Assignment required?" settings to No
Save
Option 2: Grant permission to the specific account facing the AADSTS50105 error.
Navigate Enterprise Application > Atlassian cloud
Open the Users and Groups settings.
Assign the account directly to the application or add the account as a member of any assigned group.
Was this helpful?