If a discovery is not running correctly and you see the following error in the discovery logs
Unable to create new PowerShell session for BinaryTreePowerShellUser.xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx@domain.com: System.Management.Automation.RuntimeException: AADSTS53003: Access has been blocked by Conditional Access policies. The access policy does not allow token issuance.