Microsoft Security | Microsoft Entra | Microsoft Entra ID
A cloud-based identity and access management service for securing user authentication and resource access
I am unable to access Azure Portal after creating a new subscription.
Piotr Ścibior
0
Reputation points
I have created a new Azure tenant using a private Miscrosft account that already had a Family Office 365 subscription. WHen I try to log into Azure Portal I have Error Code: 53003 (screenshot attached). Please help me restore access to Azure tenant or delete it so that I can make a new one using a new email account.
Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} votes
-
JamesTran-MSFT 37,226 Reputation points Microsoft Employee Moderator2023-06-29T23:01:00.6066667+00:00 Thank you for your post!
Error Code: AADSTS53003 Message: BlockedByConditionalAccess Access has been blocked by Conditional Access policies. The access policy does not allow token issuance. If this is unexpected, see the conditional access policy that applied to this request in the Azure Portal or contact your administrator.I understand that you created a new Azure tenant and when trying to login you're running into the error above. To gain a better understanding of your issue, can you re-upload your screenshot and share the Correlation ID and timestamp that you're receiving?
Additional Links:
- Common Conditional Access error codes
- Azure AD Authentication and authorization error codes
- Troubleshooting sign-in problems with Conditional Access
If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.
-
Piotr Ścibior 0 Reputation points
2023-06-30T05:43:03.5166667+00:00 Hi. Screenshot attached.
Error details:
Troubleshooting details
If you contact your administrator, send this info to them.
Copy info to clipboard
Error Code: 53003
Request Id: 0d5b1cbe-7812-4a68-9427-089d9ecc2b00
Correlation Id: 06fa0b9f-6d31-4ec7-ab30-2f9bffdc297a
Timestamp: 2023-06-30T05:41:39.224Z
App name: Azure Portal
App id: c44b4083-3bb0-49c1-b47d-974e53cbdf3c
IP address: 83.25.147.216
Device identifier: Not available
Device platform: Windows 10
Device state: Unregistered
Flag sign-in errors for review: Enable flagging
If you plan on getting help for this problem, enable flagging and try to reproduce the error within 20 minutes. Flagged events make diagnostics available and are raised to admin attention.
-
Piotr Ścibior 0 Reputation points
2023-06-30T05:45:23.6366667+00:00 I have posted a reply as an answer, I have not seen the add comment button, sorry :)
-
JamesTran-MSFT 37,226 Reputation points Microsoft Employee Moderator
2023-06-30T20:28:42.32+00:00 Thank you for following up on this!
When looking into your Correlation ID, I was able to see that you completed MFA in order to login to your tenant, but it looks like you have another Conditional Access Policy that blocks sign-in from the Browser. For more info - Client apps.
- Do you have any other administrators in your organization that aren't blocked?
- Since your CA policy is blocking sign-in from the Browser, are you able to leverage the Graph API or PowerShell to update your CA Policy?
Additional Links:
Conditional Access: Programmatic access
I hope this helps!
Thank you for your time and patience throughout this issue.
-
Piotr Ścibior 0 Reputation points
2023-06-30T20:42:01.82+00:00 Hi. Thank you for the answer. I havent had the ability to do anything on the Azure tenant. I just completed to set it up and after putting in my credit card, I wanted to log in and saw the mentioned error. MFA is indeed turned on but through Microsoft account controls.
-
JamesTran-MSFT 37,226 Reputation points Microsoft Employee Moderator
2023-07-06T18:30:33.04+00:00 Thank you for following up on this and I apologize for the delayed response!
Since you just created this Azure tenant, can you make sure that you're logging into the correct tenant? Based off the information within your Correlation ID, it looks like there are two Conditional Access Policies being enforced. If you just created this Azure tenant there shouldn't be any CA policies created that would be blocking your login.
-
Piotr Ścibior 0 Reputation points
2023-07-06T20:12:20.55+00:00 James, I am now taking a teoretical guess here - it might be that my account was/is connected to another tenant. Either by being a "guest" account somewhere or having some old, forgotten subscription attached that I used for training purposes during MS lessons. The question is, can I contact anybody from MS support to delete the newest tenant so I can create a new one using a completly new account? I tired co call Microsoft official support but the nice automated lady tells me that support was moved to community forums...
Sign in to comment
Sign in to answer