An application might have decided on the wrong tenant to signal into, along with the at this time logged in user was prevented from doing so due to the fact they didn't exist inside your tenant. If this user really should be able to log in, incorporate them for a guest. See docs below: Increase