Skip to content

Auth Failed when using Azure CLI on Dev Box #31827

@ksenluu

Description

@ksenluu

Describe the bug

Cannot login using Azure CLI on dev box. I am getting the popup to login and then getting the below error message. I've tried logging in using a specific tenant id and tried az login --allow-no-subscriptions nothing works.

Related command

az login

Errors

PowerShell 7.5.2
PS C:\Users\ksenialuu> az login
Select the account you want to log in with. For more information on login with Azure CLI, see https://go.microsoft.com/fwlink/?linkid=2271136

Retrieving tenants and subscriptions for the selection...
Authentication failed against tenant 1a092f68-5741-455a-8057-2acdb897a850 'HMGAdmin': SubError: message_only V2Error: invalid_grant AADSTS53003: Access has been blocked by Conditional Access policies. The access policy does not allow token issuance. Trace ID: 232a7820-9157-4bb8-8223-4d773a0d6100 Correlation ID: ad8c14db-b243-4e7c-af1c-9d8cb97384d1 Timestamp: 2025-07-16 18:22:01Z. Status: Response_Status.Status_InteractionRequired, Error code: 3399614476, Tag: 557973645
The following tenants don't contain accessible subscriptions. Use az login --allow-no-subscriptions to have tenant level access.
13e541f2-35b1-4081-98e5-add1545acf00 'Contoso'
If you need to access subscriptions in the following tenants, please use az login --tenant TENANT_ID.
1a092f68-5741-455a-8057-2acdb897a850 'HMGAdmin'

Issue script & Debug output

n/a

Expected behavior

Being able to log in

Environment Summary

{
"azure-cli": "2.73.0",
"azure-cli-core": "2.73.0",
"azure-cli-telemetry": "1.1.0",
"extensions": {
"account": "0.2.5"
}
}

Additional context

No response

Metadata

Metadata

Assignees

Labels

Accountaz login/accountAuto-AssignAuto assign by botAuto-ResolveAuto resolve by botAzure CLI TeamThe command of the issue is owned by Azure CLI teamPossible-SolutionSimilar-Issuecustomer-reportedIssues that are reported by GitHub users external to the Azure organization.questionThe issue doesn't require a change to the product in order to be resolved. Most issues start as that

Type

No type

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions