A cloud-based identity and access management service for securing user authentication and resource access
Hello @Shanthi Basavanahalli Venkareddy
The error shows that although authentication is successful, a Conditional Access policy is preventing access. This frequently happens when the policy limits access on the basis of allowed client apps, network location, device compliance, application, client type, or sign-in risk.
Kindly have an Entra ID administrator check the user's sign-in logs under Monitoring & Health → Sign-in logs in the Microsoft Entra admin center, and look for the unsuccessful sign-in on the Conditional Access tab. The particular policy and grant control that is triggering the block will be found in the sign-in log.
Additionally, confirm:
- The device is compliant or hybrid/Azure AD joined (if required).
- The user is connecting from an allowed location/network.
- The application and client type are permitted by policy.
- Any required MFA or Terms of Use requirements have been completed.
The Conditional Access details in the sign-in log will pinpoint the exact restriction that must be addressed.
Let me know if any further queries - feel free to reach out!