Ensuring devices meet organizational security and compliance policies
Looks like the browser is not sending device state information back to Entra ID for conditional access evaluation. If you notice in the log, it says device state is 'Unknown'. Which browser is the user trying to access corporate data from? Have you configured the settings to support SSO for browser based authentication?