Small and medium business | Business Central, N...

Shared Emailbox error

(6) Share

Report

Posted on by LF-16052033-0

526

Hello,

All users have the correct send on behalf permissions to the shared email box. However, one user is receiving the following error message when sending the email from the shared email box in Business Central.

LicenseServiceNonTransientException: Service resource is gone. Exception details : Status code returned: 'Gone', HTTP request error: Unknown, Message: "[AuthenticationHandler.AcquireTokenSilentWithLoginHintAsync with certificate] threw MsalClaimsChallengeException with errorCode: invalid_grant, correlationId: e15a907c-37bc-4815-850b-e2fc05cb486a, details: AADSTS53009: Application needs to enforce Intune protection policies. For additional info on how to handle claims related to multifactor authentication, Conditional Access, and incremental consent, see https://aka.ms/msal-conditional-access-claims. If you are using the On-Behalf-Of flow, see https://aka.ms/msal-conditional-access-claims-obo for details.".

The users have exchange license and MFA enabled, but the shared email does not have MFA.

Categories:

Dynamics 365 Business Central

I have the same question (0)

All responses (4)

Answers (0)

Suggested answer

Jainam M. Kothari 15,631 Super User 2025 Season 2 on at

Like (1)

Report

Hello,

Microsoft Conditional Access policies are blocking the user's attempt to send emails from the shared mailbox in Business Central due to non-compliance with Intune App Protection requirements. Even though the user has the correct permissions and MFA enabled, their device or app may not meet the organization's Intune compliance standards.

You need to ensure the user's device is enrolled in Intune, the app used supports Intune policies, and review Conditional Access settings in Azure AD to confirm the correct enforcement rules are in place.

Was this reply helpful? Yes No
Suggested answer

Andrés Arias 4,188 Super User 2025 Season 2 on at

Like (2)

Report

Hello,

Could you check if the affected user is using a compliant device (Azure AD or logged into Intune)?

I would also check the Conditional Access policy for BC.

I hope to be able to help.

Regards,

Andres

Was this reply helpful? Yes No
Gerardo Rentería Ga... 25,169 Most Valuable Professional on at

Like (1)

Report

Hi, good day
I hope this can help you, and give you some hints.

Troubleshoot Microsoft Intune app protection policy deployment - Intune | Microsoft Learn

Troubleshoot user issues for Microsoft Intune app protection policies - Intune | Microsoft Learn

Best Regards
Gerardo

Was this reply helpful? Yes No
Suggested answer

Sohail Ahmed 11,136 Super User 2025 Season 2 on at

Like (1)

Report

The error is due to a Conditional Access policy requiring Intune protection or compliant devices. Even with correct permissions, the user is blocked because the policy applies stricter rules for shared mailboxes in Business Central.

✅ Check Azure AD Conditional Access settings and either adjust the policy or exclude Business Central from it.

✅ Mark this answer as verified if it helps you.

Was this reply helpful? Yes No