Skip to main content
Question

Sandbox tenant access error - blocked

  • June 1, 2026
  • 5 replies
  • 46 views
D
Committed ⭐️⭐️⭐️
Forum|alt.badge.img+12

I’m getting the below error details when trying to access a new sandbox environment that has been setup.  What details do I need to share w/my team to unblock access?




Your network administrator has blocked access

External access is blocked by policy. Contact your IT department for access.

 

Troubleshooting details

If you contact your administrator, send this info to them.

Copy info to clipboard

Request Id: f3b6e072-9289-427c-97e4-766a40af0700

Correlation Id: e24e2dc7-9a3a-488c-92a3-fb333dc35281

Timestamp: 2026-06-01T21:34:21Z

Message: AADSTS500021: Access to 'XXXXXXXX' tenant is denied.

 

App name: Cognite Data Fusion

Device platform: Windows 10

Device state: Unregistered

IP address: 35.199.59.75

Signed in as: XXXXXXXXXX

Flag sign-in errors for review: Enable flagging

If you plan on getting help for this problem, enable flagging and try to reproduce the error within 20 minutes. Flagged events make diagnostics available and are raised to admin attention.

    5 replies

    Mithila Jayalath
    Expert ⭐️⭐️⭐️⭐️
    Forum|alt.badge.img+8
    • Mithila Jayalath
    • Expert ⭐️⭐️⭐️⭐️
    • June 2, 2026

    ​@dburley70 can you please share the error that you are observing?

    Ali Tahir
    Committed ⭐️⭐️⭐️
    Forum|alt.badge.img+6
    • Ali Tahir
    • Committed ⭐️⭐️⭐️
    • June 2, 2026

    ​@dburley70 This is an Azure AD (Entra ID) tenant access policy blocking you. i think your IT admin needs to whitelist Cognite's Azure tenant in your organization's cross-tenant access settings.

    D
    Committed ⭐️⭐️⭐️
    Forum|alt.badge.img+12
    • dburley70
    • Author
    • Committed ⭐️⭐️⭐️
    • June 2, 2026

    I shared all the error msg details in the original post.

    If they are to white-list the tenant, what is the tenant they need to white-list, that is the question?!?

    is it the name that’s in the error msg? Message: AADSTS500021: Access to 'XYZ' tenant is denied.

    if my URL is https://XYZ.fusion.cognite.com/XYZ, what am i asking my team to white-list?  the full URL?  or just a portion of it?

    Ali Tahir
    Committed ⭐️⭐️⭐️
    Forum|alt.badge.img+6
    • Ali Tahir
    • Committed ⭐️⭐️⭐️
    • June 2, 2026

    ​@dburley70 The XXXXXXXX in your error is Cognite's tenant ID, that's what your IT needs to whitelist. Give them the unredacted XXXXXXXX value from your error message. They add it in:
    Azure Portal → Entra ID → External Identities → Cross-tenant access settings

    D
    Committed ⭐️⭐️⭐️
    Forum|alt.badge.img+12
    • dburley70
    • Author
    • Committed ⭐️⭐️⭐️
    • June 3, 2026

    tried all this...still getting the same error

    Terms & ConditionsAccessibility statement