Skip to main content

Why do I get "Couldn't sign you in" error when using Microsoft Login?

  • Updated

 

 

The following error ➜

Couldn't sign you in

Cannot resolve user profile, please check the identity provider configuration

Can occur when using enterprise Azure users from Azure AD.  Azure does not require associating an email with these users.

 

How to fix this:

  1. Open Azure console ➜ Active Directory ➜ App registrations ➜ [YOUR_APP_NAME] ➜ Token configuration
  2. Click Add optional claim ➜ ID ➜ Check the box for Turn on Microsoft Graph profile permission, and check the box forupn

 

3. Save and try logging in again. Frontegg should extract your email from the newly added upn field that will be sent with the user JWT!