Desktop Application Authentication Issue with AzureAD Integration

[yuki.umezaki]

Hello

I'm currently working on a desktop application that integrates with Genesys through an API. We have configured the access token grant type as "Implicit Token" and set up authentication to occur when the application is launched. However, we've encountered an issue when trying to authenticate using an AzureAD ID that is integrated with SSO. We receive the following message and are denied access from Azure:

"Sign-in has been completed, but access conditions for this resource have not been met. For example, you may be accessing from a restricted browser, app, or location as determined by an administrator."
(It's actually in Japanese, so it differs from the English version of AzureAD in terms of wording.)

For app authentication, we are using
"OAuthWebViewForm()" from "GenesysCloudOAuthWebView.WinForms.dll",
and we have confirmed that this application can authenticate with Genesys Cloud using its ID and with AzureAD using a web browser.

Has anyone encountered a similar issue, or does anyone have insights into what might be causing the desktop application authentication to be rejected by AzureAD under these conditions?
Your help and expertise would be greatly appreciated.

[vpirat]

Hi,

That's the kind of issue with no straightforward answer.
It is likely that there's some conditional access policy in place.
This could involve IP ranges filtered out, device being blacklisted, etc.

I would advise to review Azure logs to check which policy was triggered and involve Azure admin to solve this if you don't have access to the Azure portal.
My two cents.

Hope this helps.

Regards,
V.P.