Authentication problem from cli

antoniocapunime 21 Reputation points
2022-09-08T11:21:42.61+00:00

Hi all, I have an account connected to two organizations, in the first one (the main one) it would seem that Azure is not enabled, in fact if from browser I try to connect to Azure I get a message saying "You have completed logging in but you are not authorized to access this resource.", error code 53003.
My account is also connected to a second organization, in this one Azure is enabled, in fact if from browser I try to open a page related to a service of this organization (for example Application Insight) I can view it correctly.
The problem occurs when I try to login from the command line with "az login," when I am redirected to the login page from the browser and put in the credentials, it appears to be logged in with my main organization and I get the usual 53003 error. This prevents me from accessing the Azure resources of the second organization I am connected to (for example I need to connect to one of their Kubernetes clusters and I can't).
Until a few months ago the login from cli worked correctly (and I was connected to the same two organizations as I am now), but now it does not work.
How can I solve this?
Thank you.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,026 questions
0 comments No comments
{count} votes

Accepted answer
  1. Olga Os - MSFT 5,836 Reputation points Microsoft Employee
    2022-09-08T16:13:19.503+00:00

    Hello @antoniocapunime ,

    Welcome to the MS Q&A forum.

    Error failure 53003 means your sign-in request was blocked due to a conditional access policy configured on the Tenant where you tried to authenticate. Means, Tenant Admin configured CA Policy to control what a specific user can access, and how and when they have access: block user/group membership or block based on the specific location/device/application, etc. You should consult with the business' IT administrator of this Tenant to check for Azure Conditional Access Policies that are applying to you and your account.

    Below references to articles where you could find more detailed information about this sign-in failure and access control policies which were used to block this sign-in:

    Hope above answers your question and concern. Let me know if you need additional assistance. If the answer was helpful, please accept it and complete the quality survey so that others can find a solution.

    Sincerely,
    Olga


0 additional answers

Sort by: Most helpful