AADSTS135011 – Device Used During Authentication Is Disabled

Error: AADSTS135011 – The device used during authentication is disabled

This error occurs when the device associated with your delegated admin account in Entra ID (Azure AD) has been disabled or deleted.

Cause: Microsoft links authentication tokens to the device used during login. If that device is disabled, future access attempts using the same session or refresh token will fail.

Resolution

To resolve the issue, re-authenticate the delegated admin account and re-grant Partner Center consent:

1. Login to Sync 365
2. Go to Company → Delegated admin tab
3. Take note of the currently used account (do not delete it)
4. Click Add → Grant partner center consent
5. Log in using the same delegated admin account
6. Ensure MFA is completed during login — required for Partner Center token refresh

This will regenerate a new valid token from a healthy device and restore access.