Complete failure of az login from Ubuntu 24

[zcodegit]

Describe the bug

I need to speak with your leadership. This issue is 100% blocking, and has been for 4 weeks, and it is unacceptable that neither Helpdesk nor the internal Azure case isn't being solved.

When issuing an 'az login', and successfully going through the loging process in Edge on Windows, with a valid device code extension, I get the following error in Ubuntu:

AADSTS53003: Access has been blocked by Conditional Access policies. The access policy does not allow token issuance. Trace ID: 2f8ccb7a-459e-44fb-b615-232475945800 Correlation ID: 824fc737-3721-428a-adb8-e51aec8c4cce Timestamp: 2026-02-17 18:39:09Z
Run the command below to authenticate interactively; additional arguments may be added as needed:
az logout
az login

From portal.azure.com:

Sign-in error code

50199

Failure reason

For security reasons, user confirmation is required for this request. Please repeat the request allowing user interaction.

Related command

az login

Errors

AADSTS53003: Access has been blocked by Conditional Access policies. The access policy does not allow token issuance. Trace ID: 2f8ccb7a-459e-44fb-b615-232475945800 Correlation ID: 824fc737-3721-428a-adb8-e51aec8c4cce Timestamp: 2026-02-17 18:39:09Z

Issue script & Debug output

None

Expected behavior

az login to succeed

Environment Summary

azure-cli 2.83.0

core 2.83.0
telemetry 1.1.0

Extensions:
azure-devops 1.0.2

Dependencies:
msal 1.35.0b1
azure-mgmt-resource 23.3.0

Python location '/opt/az/bin/python3'
Config directory '/home/zmathe/.azure'
Extensions directory '/home/zmathe/.azure/cliextensions'

Python (Linux) 3.13.11 (main, Jan 27 2026, 07:24:17) [GCC 13.3.0]

Legal docs and information: aka.ms/AzureCliLegal

Your CLI is up-to-date.

Additional context

No response

[yonzhan]

Thank you for opening this issue, we will look into it.

[github-actions]

Here are some similar issues that might help you. Please check if they can solve your problem.

• az login fails from Linux: Your sign-in was successful but your admin requires the device requesting access to be managed by Microsoft to access this resource. #17273
• Unable to do az login from terminal use company SSO #32779

---

Possible solution (Extracted from existing issue, might be incorrect; please verify carefully)

Solution 1:

As the error indicated, your login is blocked because Ubuntu is not a supported device. Several solutions:

• az login with a user account on a supported system - Windows or MacOS, and make the device compliant.
• az login --service-principal with a Service Principal which doesn't have compliance check (az login fails from Linux box: AADSTS50005: User tried to log in to a device from a platform (Unknown) #16401 (comment)).
• Contact your tenant admin to turn off Conditional Access: Require compliant devices for your account and Azure CLI.

Reference:

• az login fails from Linux: Your sign-in was successful but your admin requires the device requesting access to be managed by Microsoft to access this resource. #17273 (comment)

Solution 2:

If you are not a Microsoft employee, you need to contact your tenant administrator to check why you are blocked, possibly by IP restriction, VPN requirement, etc.

Reference:

• Unable to do az login from terminal use company SSO #32779 (comment)

Powered by issue-sentinel