An application may need chosen the wrong tenant to signal into, plus the now logged in user was prevented from doing so given that they didn't exist in your tenant. If this user must have the capacity to log in, include them to be a guest. See docs listed here: Add B2B consumers. what we??re using the domains for would make a big distinction concer