Administrator resources

Tools and templates for identity administrators

Find the meaning of a sign-in error, identify where to investigate, and follow a detailed guide for your issue.

Sign-in troubleshooting

Find the next check for your Entra error

Look up an error code or search a symptom, then follow the checks and the full walkthrough.

Search stays in your browser. Enter a code or short symptom, not a full sign-in log.

6 guides found

AADSTS53003

Blocked by Conditional Access

Conditional Access blocked this request.

Where to look

Open the failed sign-in, then its Conditional Access tab. Identify the failed policy and inspect its grant controls alongside the event’s device and resource details.

What to check

  1. Does the failing event match the user, time, and application in the report?
  2. Which policy failed, and which requirement was unmet?
  3. Is the block intended for this user and resource?

Do not disable the policy simply because access was blocked.

Read the full troubleshooting guide →Look up this code with Microsoft ↗

Definitions checked against Microsoft’s error reference on October 4, 2026. The checks are an editorial starting point; the code alone does not identify the root cause.

Optional planning templates

Download editable templates

Plain Markdown files that open in any text editor. Free to adapt for your own operational records; no email address required.

Sign-in triage worksheet

A blank investigation record: scope, timestamps, policy results, competing explanations, and the evidence needed to close the ticket.

Download .md ↓

Identity change record

Write down the expected effect, approval, pilot scope, rollback trigger, and verification before changing a control.

Download .md ↓

Conditional Access rollout worksheet

Plan a pilot, record report-only observations, and decide whether the evidence supports moving to enforcement.

Download .md ↓

How to use these resources

The downloadable files are planning templates. Blank fields are intentional: an observation you have not collected should stay unknown. Keep secrets out of shared notes and store completed records in your organisation’s approved system.

For context, read the AADSTS53003 troubleshooting guide or the Conditional Access evaluation guide. Report a problem through the contact page.