Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
Take a look at your MFA settings. I stumbled across this while working with one of my users who does not use Authenticator (does not have a smart phone) after some recent MFA changes. It was failing to register the device (new byod Win11Pro laptop) with Azure and download an app protection policy because it was attempting to redirect to the MFA setup so the user could setup a supported method, but wasn't able to browse there because the device wasn't getting registered & downloading the app protection profile which in turn caused it to fail the conditional access policy required a registered device and app protection policy when using a browser to access company resources.
Hope this helps someone else banging their head against the wall trying to figure out what should be a VERY simple process is failing.