The Microsoft Learn linking procedure you used is correct; select More details on the blocked sign-in, record its diagnostic information, and submit it to TCS IT because only the organization’s administrators can determine and change a Conditional Access, device-compliance, or tenant-restriction policy.
Reproduce the failure once, then select More details on the “You cannot access this right now” page and record:
- Error code
- Request ID
- Correlation ID
- Exact UTC date and time
- Application/resource shown
- Screenshot of the complete message, excluding sensitive information
- Device type and operating system
- Whether the device is TCS-managed or personal
Microsoft documents that these details identify the corresponding Microsoft Entra sign-in event. Error codes such as 53000, 53001, and 53003 distinguish a noncompliant device, a device that is not domain-joined, and a Conditional Access block respectively.^1^
The message alone does not identify which policy caused the failure, so device compliance or Conditional Access should remain a hypothesis until the sign-in event is checked.
Request the administrator check
Send the captured details to the TCS identity/access-management or Microsoft 365 help desk and request:
Please review the Microsoft Entra sign-in event for this request/correlation ID. I am linking my TCS organizational login to an existing personal Microsoft Learn profile for certification voucher eligibility. Please identify the failed Conditional Access or tenant-restriction policy and provide the approved compliant-device/network method, or grant the authorized exception required for this linking operation.
An administrator with at least the Reports Reader role can investigate at:
- Microsoft Entra admin center
- Entra ID → Monitoring & health → Sign-in logs
- Filter by Correlation ID, username, date, and Conditional Access failure.
- Open the event and examine:
- Conditional Access
- Troubleshooting and support
- Device Info
- Authentication Details
- The affected resource and policy name
These fields show the policy that interrupted authentication and whether the device, network, client, or another condition failed.^1^
Approved method depends on the logged failure
- If the event says the device is not compliant: use a TCS-managed compliant device, or ask TCS whether personal-device registration is permitted. Microsoft’s compliance guidance recommends joining a work-owned device or registering a personal device, but only under the organization’s approved process.^2^
- If a compliant network is required: connect through the TCS-approved corporate network, VPN, or secure-access client specified by TCS. Installing Edge by itself does not satisfy a network or device-compliance requirement.
- If tenant restrictions blocked access: only the TCS administrator can permit access to the required organization or create an exception.^3^
- If the page specifically requests Edge browser sign-in: switch to an Edge profile signed in with the TCS work account. Since you already tried Edge on mobile, repeat this only if TCS confirms that the mobile device is registered/compliant or directs you to use a managed device.^2^
Do not attempt to enroll a personal device or bypass TCS controls without approval.
Microsoft Learn side
A personal Learn profile can have up to five work or school login accounts. The supported path is Profile icon → Settings → Account Management → Add Login account, followed by authentication with the organizational account.^4^
If TCS confirms that its sign-in policy allowed the request but linking still fails, raise a Microsoft Learn/Credentials support request and include the same request ID, correlation ID, timestamp, screenshot, and Learn username. Microsoft cannot recover or alter access to the TCS work account itself; work-account access remains with the workplace administrator.^5^
References
- Troubleshoot sign-in problems with Conditional Access
- Troubleshooting compliance error messages for a work or school account | Microsoft Support
- How to fix the error message "Your network administrator has blocked access"
- Managing your Microsoft Learn profile settings
- Accessing your Learn profile