Troubleshooting Microsoft 365 Errors

If you've received an error in Sync 365 related to authentication, consent, token refresh, or license sync, use the links below to find the exact resolution.

Authentication& MFA Errors

• AADSTS50078 – MFA expired due to a policy change: Re-consent the admin account after policy enforcement
• AADSTS50076 – MFA required due to location or config change: Grant partner center consent again
• AADSTS700082 – Token expired due to 90-day inactivity: Disable "Remember MFA for X days"

Access& GDAP Relationship Issues

• AADSTS50177 – User not found in tenant: GDAP is missing or misconfigured
• Access Denied – Caller lacks valid Entra role: GDAP group missing roles
• User Not Found – Account does not exist or is inactive: Partner relationship expired or removed
• Consent Error – Application not granted consent: Ensure Application Admin role exists in GDAP
• System Exception – Core Exception thrown: Missing Application Admin in GDAP group

Conditional Access& Permissions

• AADSTS530004 – Device compliance setting missing: CA policy only allows compliant devices
• AADSTS53003 – Access blocked by Conditional Access: Exclude service account/principal from CA policy
• AADSTS530034 / 530032 – Admin blocked due to risk: Mark user as not risky and disable security defaults
• Management Role Error – User not assigned roles: GDAP group is missing required roles
• Permission Error – Lacking security permission: PSA API user doesn’t have access to needed agreement types

Account& Device Configuration

• AADSTS500571 – Guest user account is disabled: Named user is a guest in client tenant
• AADSTS135011 – Device used during auth is disabled: Re-consent from a valid device

Billing& License Sync Errors

• Billing Profile Error – Product missing or invalid: Update or re-activate the product in PSA or Sync 365
• Group Mapping Error – Group ID not found: Custom license references an invalid group

Authorization& Token Errors

• Authorization Error – Unsupported token or forbidden: Missing permissions or partner relationship issue
•  AADSTS500014 – Service Principal for Outlook is Disabled : Caused by a disabled or missing Exchange Online application or expired tenant subscription.

If you're unsure which error applies or need help, contact support@sync365.app.