AADSTS530032

What it means

A tenant security policy blocks the request.

How to fix it

Check Conditional Access and security defaults in the sign-in log entry.

How to investigate

1. Open the failed sign-in in the Entra admin center and select the Conditional Access tab. It lists every policy that applied and which one failed.
2. Check the Device info tab: whether the device is registered, compliant and managed.
3. Use What If in Conditional Access with the same user, app and device platform to reproduce the decision.
4. Search the sign-in logs for the request ID or correlation ID from the troubleshooting details on the error page.

Guides on this site

• Test Conditional Access safely with report-only mode and What If

Tools that help

• Sign-in log explainer
• Conditional Access visualiser
• Troubleshooting wizards
• Microsoft's error lookup for 530032 ↗