# InvalidAuthenticationTokenTenant: The access token is from the wrong issuer

**Code:** `InvalidAuthenticationTokenTenant` · **Category:** Azure · **Seen on:** Azure

The token was issued by a different tenant than the one that owns the subscription/resource.

## Meaning

Multi-tenant users and guests must get a token for the resource’s tenant. Tools defaulting to the home tenant cause it.

## Common causes

- Token from home tenant used against another tenant’s subscription
- Wrong tenant in SDK/CLI configuration
- Cached credentials for another tenant

## Quick fix

1. Log in to the resource’s tenant: az login --tenant <id>
2. Pass tenant_id to the SDK credential
3. Clear cached accounts

## Detailed fix by platform

### Azure CLI

1. 

```bash
az login --tenant <subscription-tenant-id>
az account get-access-token --tenant <subscription-tenant-id> --query tenant
```


## How to diagnose

1. **Tenants** — Token issuer vs subscription tenant
2. **Config** — Tenant setting in SDK

---
Source: [WhatIsMyError](https://whatismyerror.com/errors/azure/invalidauthenticationtokentenant)