Error: AADSTS50105 appears when signing in to Zendesk

When I try to sign in to Zendesk using single sign-on with Microsoft Entra, I see the error AADSTS50105

When I try to sign in to Zendesk using single sign-on (SSO) with Microsoft Entra, I see the error:

AADSTS50105: Your administrator has configured the application Zendesk ('xxxxxxxxxxx') to block users unless they are specifically granted ('assigned') access to the application. The signed in user 'agentnameprofile@xxxx.com' is blocked because they are not a direct member of a group with access, nor had access directly assigned by an administrator. Please contact your administrator to assign access to this application.

This error message originates from Microsoft, not Zendesk. For more information about what the error means and how to resolve it, see Error AADSTS50105 - The signed in user isn't assigned to a role for the application.

To troubleshoot the AADSTS50105 error:

Contact the Microsoft or SSO admin in your organization

The admin can confirm whether you, or the affected agent, have the correct permissions and are in the group that has access to the Zendesk application

You can also see the community article which includes an example of how another user resolved the issue.

If the problem continues, contact Microsoft Support for further assistance.

Disclaimer: This article is provided for instructional purposes only. Zendesk does not support or guarantee behaviors with third party tools. If these instructions don't help, search for a solution online or with Microsoft.