Zscaler App login issue -- uses my infosys when given with my client account

[sumanthdandaboina]

When logging in to the Zscaler app installed on my Companies machine, it is picking my company account instead of taking my client account which am trying to use when logging in…

I clearly give my client email id and hit login, but it will automatically pick my Infosys account and throw me AD error —AADSTS50177: User account ‘**********@ad.infosys.com’ from identity provider ‘https://sts.windows.net/63ce7d59-2f3e-42cd-a8cc-be764cff5eb6/’ does not exist in tenant ‘XX’ and cannot access the application ‘zscloud.net’(Zscaler) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account…

Is this happened to anyone?

[skottieb (Scott Bullock)]

Hi @sumanthdandaboina, I can think of a few things that may be happening here, but all will require more diagnostics. Do you have a support ticket open, they are best poised to help you resolve this?

[sumanthdandaboina]

Hey @skottieb I already opened it. go an advice that i have add my company domain as a tenant in our client Azure in order to accept this. OR i have to wait until April where Zscaler planned to release new update where it will support multi domains.
ticket # 02338424 for reference

[Jim_Prins]

For users with multiple Azure AD identities, when zScaler requests an identity ticket, is there a way to “hint” to the user’s browser which identity provider it should retrieve the identity ticket from? Today it looks like my browser is simply sending whatever identity I used last, which is often not the identity that the zScaler is looking for.

[skottieb (Scott Bullock)]

IIRC adding whr=<userdomain.com> to the IDP config url should get AAD select the correct tenant.