Device does not meet organization policy.

2022-06-08T11:12:25.96+00:00

hi team , when i trying to logging in to microsoft portal i am getting the error as attached , can anyone help me resolve the issue
209445-2022-06-08-16h39-21.png

Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
12,633 questions
No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Sandeep G-MSFT 4,066 Reputation points Microsoft Employee
    2022-06-22T04:04:32.307+00:00

    @FIXED-TERM Murthy Ranjith (SX/EDA1)

    Thank you for reaching out to us.

    As per your query you are trying to access Azure portal or Azure services and you are getting an error.

    Usually, this error is displayed by Azure AD while authentication process. If there is conditional access policy configured in your Azure AD and if for some reason user doesn’t meet any of the conditions configured in CA policy, then user’s get this error message.

    By looking at your error, it seems like there is a conditional access policy which is configured in Azure AD which will allow users to access resources only if user device is complaint.
    While authentication happens in Azure AD, if user is using browser to login to Azure resources, then client (browser) is supposed to send the device information to Azure AD. This information is used while evaluating conditional access policy post user supplies his/her credentials.

    If Azure AD doesn’t get the required device information from client, then Azure AD will fail the authentication and will trigger the error as you see while logging in. When you check the signin log for that user in Azure AD, under “Device info” you will see something similar information as below,

    213633-image.png

    Since Azure AD doesn't receive any device compliance information, it fails the authentication.

    To fix this issue,
    If you are using Edge browser to access Azure resources, then make sure you are logged in to browser with Azure account.
    If you are using google chrome browser, you will have to install “Windows accounts” extension and signin to browser.

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.