Body
Issue
Users receive the following error when attempting to sign in to CCS Portal:
Sorry, but we’re having trouble signing you in.
AADSTS50105: Your administrator has configured the application Parallels RAS to block users unless they are specifically granted (“assigned”) access to the application.
The signed-in user is blocked because they are not a direct member of a group with access, nor has access been directly assigned by an administrator.
As a result, users are unable to launch Parallels RAS resources.
Environment
- CCS staff attempting to access CCS Portal
- Azure Active Directory (Microsoft Entra ID) authentication
- Staff's account is not assigned to the CCS Portal access group
Resolution
This issue must be resolved by requesting access. Fill out the following CCS Portal Request.
Still Having Issues
- Confirm the user is a direct member of the Parallels RAS access group (nested groups may not apply).
- Ensure the assignment has fully synchronized in Azure AD.
- Have the user fully sign out and restart their device, then try again.
If the issue persists, contact the CCS Helpdesk at 614‑365‑8425.
Cause
The Parallels RAS enterprise application in Azure AD is configured to require user assignment.
If a user is not explicitly assigned to the application (either directly or through an approved security group), Azure AD will block authentication and return the AADSTS50105 error.
This is expected behavior when application access restrictions are enabled.