'External guest users locked out of Azure AD; Error Code 530004, "AcceptCompliantDevice setting isn't configured for this organization"

Without any changes or configuration updates, all external guest users were locked out of our main Azure Active Directory.

The users would receive the following after passing the username/password login prompt:

  • Error Code: 530004
  • ...
  • App name: Azure Portal App
  • Device identifier: Not available
  • Device platform: macOS
  • Device state: Unregistered

After checking the sign-in logs, i would see this error code:

AcceptCompliantDevice setting isn't configured for this organization. The admin needs to configure this setting to allow external users access to protected resources.

I've tried disabling every single Conditional Access policy we have for our tenant, recreating users, checking every setting up and down. This is only happening to one of our tenants, the others are normal

Has anyone ever come across a similar error code? I've scoured the internet for 'AcceptCompliantDevice' and haven't found anything

azureazure-active-directorypolicy


Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source

Related Questions