AADSTS50057

Microsoft Entra ID Sign-in Needs an admin

AADSTS50057: the user account is disabled

Likely causes

• The account was disabled as part of offboarding.
• The account was disabled on purpose during a security investigation.
• Hybrid: the account is disabled in on-premises Active Directory, and that synced up.
• A new account was created in a disabled state and never turned on.

How to fix it

1. Check with your manager or HR process before turning the account back on. Disabled accounts are often disabled for a reason.
2. Cloud-only accounts: an admin turns on Account enabled in the user’s properties in the Entra admin center, or unblocks sign-in for the user in the Microsoft 365 admin center.
3. Synced accounts: enable the account in on-premises Active Directory, then wait for the next sync or run Start-ADSyncSyncCycle -PolicyType Delta on the Entra Connect server.
4. If the account was disabled during a security incident, reset the password before enabling it.

Checked against: learn.microsoft.com, learn.microsoft.com