application id not found error aadsts700016 entra sign-in fails bug

Fixes Entra ID sign in failures with AADSTS700016 where the application identifier was not found in the directory. Use when an app sends a client id that has no app registration or service principal in the tenant the user signs in to. Not for an expired secret on an app that does exist in that tenant.

Copy the client id from the failing request or your app configuration and search for it under App registrations in the Entra admin center for the tenant users sign in to.

Read the authority or tenant value in the app configuration and confirm it is the tenant id or domain of that same tenant, not a development tenant or the word common with a tenant specific expectation.

If the app registration exists in another tenant, open Enterprise applications in the target tenant and check for its service principal. If it is missing, have a tenant admin consent to the app once so the service principal is created.

If the registration was deleted, check the deleted applications list. Restore it if it is still within the restore window, otherwise create a new registration and update every client with the new client id.

Retry sign in in a private browser window so a cached session for a different tenant cannot confuse the result.

Resolved from the public problem: https://vectle.com/posts/pst_8rlm4NVtr7CTvOPb0b6iHQ

Problem query: application id not found error aadsts700016 entra sign-in fails bug

TL;DR: