Clarify what 50053 really means

Question

Follow Up Question On: Does Error 50053 Override Conditional Access Rules and Expose Passwords? based on MSFT saying there that this 50053 only occurs if correct password is used, and that 50053 is related to some hidden Conditional Access Policy—see that post for more detail—there are other posts also where MSFT are explaining it to others with the same sort of answer.

Itemized questions:

1. Conditional Access Tab: Why does the Conditional Access tab in the Sign-In logs show "Not Applicable" for events with the failure reason "Sign-in was blocked because it came from an IP address with malicious activity"?

2. Disabled Accounts: How can a password be successfully entered via Authenticated SMTP for disabled Entra accounts used for M365 Shared Mailboxes in Exchange Online?

3. Authentication Details: Why do logs in the Authentication Details tab show "Incorrect password" for these events?

4. Conditional Access Policies Visibility: If these events are related to Conditional Access Policies, why are they not visible to Global Administrators in the Conditional Access Policies section like other Microsoft Managed policies?

It is also interesting that the Basic Information tab shows authentication requirement of single-factor authentication with a result of failure after MSFT responses stating it only occurs once password is correctly specified.

Supporting Screen Shots

• 

Other Related Posts: