Authentication Failure: The access policy does not allow token issuance

[bhavitvyamalik]

I'm getting Authentication Failure: AADSTS53003: Access has been blocked by Conditional Access policies. The access policy does not allow token issuance. How can I fix it?

[berlineric]

same issue here, is it related to any configuration that need to be done on share point side ?

[RasmusParsmo]

I have the same issue, perhaps something to do with 2FA?

[JonathanHolvey]

After setting up a new SharePoint dev environment yesterday, I started experiencing this issue. Logging in on the web (as the site admin) revealed that:

Microsoft has enabled Security Defaults to keep your account secure.

You can read about security defaults in this article. Basically, it enforces security rules that appear to be incompatible with SharePy's authentication methods.

The simplest way to resolve this issue would be to disable security defaults, however this might not be an option for everyone.

[RasmusParsmo]

That was what I was afraid of, thanks for your help anyway!

[versex799]

Just for those that are seeing this error in the future.... in plain English.... I ran into this issue and it was because the account was blocked. I had the correct password but Microsoft flagged the login attempt as suspicious and blocked it.

[wUEZRs]

We saw this in the user's sign in logs. We found more info under Activity Details: Sign-ins > Conditional Access

The user was in this case traveling to a geo blocked IP