'Microsoft Authentication' fails on KNIME 4.7.2

[sherlockm]

I am not able to login using Username/password authentication in ‘Microsoft Authentication’ node.
I use ‘xxxx@mycompany.com’ as username but it doesn’t work. I receive the next error:

“ERROR Microsoft Authentication 4:630 Execute failed: AADSTS53000: Device is not in required device state: compliant. Conditional Access policy requires a compliant device, and the device is not compliant. The user must enroll their device with an approved MDM provider like Intune.”

But I still can login using ‘Interactive authentication’.

[victor_palacios]

Hi @sherlockm ,

Could you provide us with the following:

1. Your KNIME logs (how to get logs is here)
2. Current KAP version
3. Your workflow

Thank you so much! Please be sure to tag my name using the @ sign so that I can see your reply.

[sherlockm]

Hi @victor_palacios
Please find the workflow and logs attached.
Current KNIME version is “KNIME 4.7.2”
knime-logs-03-05-2023.txt (34.6 KB)
SP_test.knwf (11.9 KB)

Thank you

[victor_palacios]

@sherlockm , our technical team believe this is an issue with permissions:

1. The error sounds like a permission / environment issue that the customer IT would need to look into.

Device is not in required device state: compliant. Conditional Access policy requires a compliant device, and the device is not compliant. The user must enroll their device with an approved MDM provider like Intune.

(AADSTS53000) - there is a public FAQ from Microsoft, maybe that helps:

Error AADSTS53000 raised after migrating from AAD graph api end point to...

The technical team suspect your environment needs to allow clients with that user-agent. Let me know if that helps.