---
title: "Login Error AADSTS650052 Upon Initial Enterprise Registration"
slug: "login-error-upon-initial-enterprise-registration"
updated: 2025-09-03T00:21:18Z
published: 2025-09-03T00:21:18Z
canonical: "kb.connecttoteams.com/login-error-upon-initial-enterprise-registration"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://kb.connecttoteams.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Login Error AADSTS650052 Upon Initial Enterprise Registration

## Problem

You have clicked on the Complete button in the invitation email, but after logging in to the Enterprise Portal with Microsoft credentials you get a red error message such as the one below, possibly mentioning a Microsoft error code AADSTS650052.

![](https://cdn.us.document360.io/312e5ae5-e3c1-465d-8e37-f253a7ba8eee/Images/Documentation/image(969).png)

## Solution

This error can occur when a Microsoft 365 tenant was created incompletely. A specific Azure AD addition is needed to allow Teams phone services to be configured and managed.

This can be accomplished by executing a PowerShell Azure AD command. This must be done in coordination with the Enterprise admin, or the Global Admin credentials must be available, because the command is executed by (or on behalf of) the Enterprise Global Admin.

First, you have to have the latest version of PowerShell (7.1.1 as of this writing). See [this page](https://learn.microsoft.com/en-us/powershell/azure/install-azure-powershell?view=azps-14.4.0&viewFallbackFrom=azps-5.4.0#install-the-azure-powershell-module) for details about Azure AD usage, or just follow these simpler instructions below.

Start PowerShell as an Admin user (run as Administrator on windows, `sudo pwsh` in a Terminal on Mac).

You should see something like this:

![](https://cdn.us.document360.io/312e5ae5-e3c1-465d-8e37-f253a7ba8eee/Images/Documentation/image(970).png)

Second, you need to install the Az module with this command:

```shell
Install-Module -Name Az -AllowClobber
```

This will look like this (there is no output from the command):

![](https://cdn.elev.io/file/uploads/lWNkjTie1mEAGuhwq3R2SqTFcax3a6BIA1xEV-d9OvM/db6zGN52LK2ye34q7KMPdpjGp8eIGaTCL24ux6pWEdY/1618413352151-y94.png)

**Third**, you need to connect as the Enterprise Global Admin. There are two options for doing this.

***Option A*** is to let PS make you login in a browser window with this command

```shell
Connect-AzAccount -UseDeviceAuthentication
```

This should present you with a URL (probably [https://microsoft.com/devicelogin](https://microsoft.com/devicelogin)) and a code - open a browser window with that URL and enter the code. Then you will login as the enterprise Global Admin as “usual”. Go back to the PowerShell window and you will see it showing you logged in after a few moments:

![](https://cdn.elev.io/file/uploads/lWNkjTie1mEAGuhwq3R2SqTFcax3a6BIA1xEV-d9OvM/FE9LRFvc5OgAAJLAOB4DwPaqtkzRRyvxEmLEy9xa5x4/1618413366098-KNA.png)

***Option B*** is to just enter the command ‘Connect-AzAccount’ - this may automatically popup a browser (Safari, if you are on a Mac) and ask for your Enterprise Global Admin credentials. Or, it may give you an error. In which case you should use the first option.

Finally, you can enter the command that associates the Skype For Business service to the Enterprise account, the way it should have been all along. Enter this command:

```shell
New-AzADServicePrincipal -ApplicationId "39624784-6cbe-4a60-afbe-9f46d10fdb27"
```

The result will look something like the screen shot below. After you see that “Warning” it may take a while for the prompt to return, but once you see the prompt the Enterprise Global Admin should be good to login to the ConnecttoTeams Enterprise Portal.

![](https://cdn.us.document360.io/312e5ae5-e3c1-465d-8e37-f253a7ba8eee/Images/Documentation/image(971).png)