Setting up single sign on is always fun, besides all the endless call to do something in the Authenticator app.

"Device must comply with your organization’s compliance requirements

Which ones? We won’t tell you…"