BatchExplorer icon indicating copy to clipboard operation
BatchExplorer copied to clipboard

Azure Conditional Access identifies the product as a device platform "Windows Phone"

Open michaelatvaronis opened this issue 5 years ago • 1 comments

Describe the bug Unable to login to Azure using Batch Explorer on a Windows machine from an organization that has an Azure Conditional Access excluding logins from "Windows Phone".

To Reproduce Steps to reproduce the behavior:

  1. Set an Azure Conditional Access to exclude Windows Phone platform.
  2. Login using ADFS user credentials on a Windows machine (domain joined to the organization).

Expected behavior Login successfully, accounts are shown.

Screenshots Batch_Explorer_login

Logs(Click profile > View Logs > app.log, client.log) Client logs: Failed to authenticate","description":"Failed to load the AAD login page (-11:ERR_NOT_IMPLEMENTED)","level":"error","message":"Error redeem auth code for a token for resource arm Failed to authenticate: Failed to load the AAD login page (-11:ERR_NOT_IMPLEMENTED)

App logs: {"0":"[object Object]","level":"error","message":"[BL] Uncaught exception:","timestamp":"2020-09-06T13:05:55.536Z"} {"level":"info","message":"Websocket connection closed. Retrying to connect in 1s","timestamp":"2020-09-06T13:10:28.051Z"} {"0":{"message":"no elements in sequence","name":"EmptyError"},"level":"error","message":"Error loading subscriptions","timestamp":"2020-09-06T13:10:28.059Z"} {"0":{"message":"no elements in sequence","name":"EmptyError"},"level":"error","message":"Error loading subscriptions","timestamp":"2020-09-06T13:12:16.057Z"} {"0":{"message":"no elements in sequence","name":"EmptyError"},"level":"error","message":"Error loading subscriptions","timestamp":"2020-09-06T13:23:31.003Z"}

Version (please complete the following information):

  • OS: Microsoft Windows 10.0.18362
  • Version 2.7.0.443

michaelatvaronis avatar Sep 06 '20 13:09 michaelatvaronis

Had same issue. It seems that because my account is also linked with 3-4 other tennants. IT tries to authenticate to other Azure AD Tennant as well, then being rejected.. Storage Explorer doesn't kind of the same thing...

I used another account with Global Reader role and no Other Azure AD Tennant Relationship and it worked.

desmphil avatar Sep 11 '20 15:09 desmphil