You can get more information about the failure from within your Azure portal. Go to the Sign-in events page. Click on User sign-ins (non-interactive). Look for your event with Status = Failure. Click on the failure event and a side bar detail will pop out. Click the Conditional Access tab within that detail pop out. Here you will see the policy that caused the block. Now you can review that ...