Getting error code 53001 even know the device is joined

Question

Getting error code 53001 even know the device is joined

Eshton Hinkle 0

Some of our Mortgage team uses Surefire CRM to track different clients they have. One member of the team cannot get logged in. They log in using SSO. SSO is working on other apps he uses. There isn't any CA specific for this app or user group. Here are the error details we're getting:

Error Code: 53001

Correlation Id: 208a7e66-3e0b-4045-a807-7602a5de24eb

App name: Surefire

App id: 507fa904-b502-4252-8289-b87646e758d1

Device identifier: Not available

Device platform: Windows 10

Device state: Unregistered

Carolyne 1,151 Reputation points Microsoft Employee

2026-02-02T12:45:34.7566667+00:00

Error 53001 means the sign-in was blocked by Conditional Access because the device isn’t in a required state—in this case the Windows 10 device is Unregistered, so it doesn’t meet a policy that requires a domain‑joined, Entra‑joined, or compliant device, even if the policy isn’t app‑specific. This typically happens when the device isn’t properly Entra joined or isn’t presenting a valid Primary Refresh Token (PRT) during sign-in.

Your answer

Carolyne 1,151 Reputation points Microsoft Employee

2026-02-02T12:45:34.7566667+00:00

Error 53001 means the sign-in was blocked by Conditional Access because the device isn’t in a required state—in this case the Windows 10 device is Unregistered, so it doesn’t meet a policy that requires a domain‑joined, Entra‑joined, or compliant device, even if the policy isn’t app‑specific. This typically happens when the device isn’t properly Entra joined or isn’t presenting a valid Primary Refresh Token (PRT) during sign-in.