Hi @Kulas, Peter ,
I would suggest reaching out to the owners of the portal application to add the identity you're using to their tenant. By being added to their tenant, the Azure AD App Registration they're using should allow you in. Just because other applications are working doesn't insinuate that azureford
will work as well. It's all dependent on the app registration configured for the app service.