fairfax / Sign-in errors / AADSTS50049
AADSTS50049: NoSuchInstanceForDiscovery
The authority your app was given isn't a known Microsoft Entra instance, often a typo in the sign-in host or a host from the wrong cloud.
How to fix it
Use the sign-in host for your tenant's cloud exactly as Microsoft lists it.
| Your tenant or subscription | Sign-in host |
|---|---|
| Commercial Microsoft 365 and Azure, and GCC tenants | login.microsoftonline.com |
| GCC High and DoD tenants, and Azure Government | login.microsoftonline.us |
Note: Microsoft's row for this code doesn't mention clouds. The cause above is the common one in US government setups, so check it against yours.
What Microsoft says
“AADSTS50049 | NoSuchInstanceForDiscovery - Unknown or invalid instance.”
Source: Microsoft Entra authentication and authorization error codes, page updated 2026-06-15, checked 2026-10-12.
- “Microsoft Entra ID for US Government | https://login.microsoftonline.us” (National clouds)
Decode it from the command line
pip install fairfax
fairfax explain AADSTS50049 --tenant gcchigh # or paste the whole error message
To find the commercial sign-in host in your code before it fails, run
fairfax scan src/ --tenant gcchigh --azure government.
Other cross-cloud sign-in errors
- AADSTS90002: InvalidTenantName
- AADSTS90038: NationalCloudTenantRedirection
- AADSTS90051: InvalidNationalCloudId
- AADSTS700016: UnauthorizedClient_DoesNotMatchRequest
- AADSTS900382: Confidential Client isn't supported in Cross Cloud request
- AADSTS900432: Confidential Client isn't supported in Cross Cloud request
- AADSTS900439: USGClientNotSupportedOnPublicEndpoint
- AADSTS1000104: XCB2BResourceCloudNotAllowedOnIdentityTenant