Conditional Acces not configured but: Access has been blocked by Conditional Access policies. The access policy does not allow token issuance

Question

Hello,

we are currently experiencing failed logons via visual studio.

Our developer cannot logon through the application and we get the following log:
"Access has been blocked by Conditional Access policies. The access policy does not allow token issuance." (Error 53003)
"If this is unexpected, see the conditional access policy that applied to this request in the Azure Portal."

So I checked the policy for conditional access and saw that there is no rule active. We don't even have Entra ID Premium to activate or even create a rule.

We did not change any policies.

Did anyone experience the same behaviour?

Kind regards

Answer 1

@Giano Ilhan

Thank you for reaching out. I would like to confirm you that Visual Studio by design authenticates users against all the tenant’s user is part of. Hence if the user is part of any other tenant which has conditional access policy he might be getting blocked due to conditional access policy on that tenant.

Affected user can browse to https://myaccount.microsoft.com/organizations to review the tenants/organizations he is part of and leave if there is any unwanted organization he can leave that organization to fix the issue.

• User can also follow the details mentioned in following article to get detail steps to Leave an organization as a guest user - Azure Active Directory External Identities | Microsoft Learn
• If user is unable to leave this tenant using self-serve option, then he might need to contact tenant admin for mentioned tenant and ask them to either exclude him from the policy or remove the user from the tenant.

I hope this helps and hence would request you to please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

Thank you very much.

This helped!

Kind regards