> ## Documentation Index
> Fetch the complete documentation index at: https://absentify.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Resolving AADSTS50105: User not assigned access

> Resolve the AADSTS50105 “user not assigned access” error in Microsoft Entra ID by assigning users or groups to the absentify enterprise application.

When logging into absentify via SSO/SAML, you might encounter the following error:

> *AADSTS50105: Your administrator has configured the application absentify ('4dce2abf-3f8e-4281-9f7a-d602fc391886') to block users unless they are specifically granted ('assigned') access to the application.*

### What does this error mean?

This error occurs because the signed-in user has not been granted access to the absentify application. Access needs to be explicitly assigned by an administrator, either directly to the user or to a group they belong to.

### How to fix the error

As an administrator, you can resolve this error in a few steps:

<Steps>
  <Step title="Access the Azure portal">
    1. Go to the [Azure portal](https://portal.azure.com/).

    2. Search for **"Azure Active Directory"** in the top search bar and select the result.
  </Step>

  <Step title="Find the absentify enterprise application">
    1. In the Azure Active Directory menu on the left side, select **Enterprise applications**.

    2. Search for and select **“absentify”** from the search bar.
  </Step>

  <Step title="Assign users or groups to the application">
    1. In the left-hand menu, select **Users and Groups**.

    2. Select **Add user/group** at the top of the page.

    3. In the Add Assignment pane, select **Users** to search for and select the user or group that needs access.

    4. Select **Assign** to grant them access.
  </Step>
</Steps>

### Additional resources

* **Why this happens**: Azure Active Directory enforces access restrictions for enterprise applications when configured to require user or group assignments. If no assignments exist, users will not be able to sign in.

* **Prevent this error in the future**: You can simplify user management by assigning access at the group level instead of individually. This allows you to manage access dynamically as users join or leave groups.

<Info>
  For more detailed information, refer to the [official Microsoft guide on AADSTS50105](https://docs.microsoft.com/en-US/troubleshoot/azure/active-directory/error-code-aadsts50105-user-not-assigned-role).
</Info>

### Need more help?

If you continue to encounter issues, contact our [support team](/docs/en/introduction#how-to-get-further-assistance) for further assistance.

***