Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

AzureAD access denied error: unknown platform with conditional access policy #1178

Open
mcmessina opened this issue Dec 11, 2023 · 0 comments

Comments

@mcmessina
Copy link

I receive an error in the authentication process after processing my auth credentials correctly (pages with 200 status codes are being loaded after these values are processed). After some redirects, I receive the error: "reached an unknown page within the authentication process provider=AzureAD".

I ran the command DUMP_CONTENT=true saml2aws login --verbose to view the logs. The first 403 status code includes the message "User tried to log in to a device from a platform (Unknown) that's currently not supported through Conditional Access policy. Supported device platforms are: iOS, Android, Mac, and Windows flavors."

Is there a workaround for this error? In other words, could we spoof or modify the platform in this AzureAD authentication process so that it appears as a supported device platform? If there is no workaround and I am limited by my corporate Conditional Access policy (which I do have the ability to modify), what should I include in a request to modify this Conditional Access policy?

saml2aws version: 2.36.13
saml2aws config details:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant