With a Cloud Apps conditional access policy only allowing users access to the network if they enrolled in Azure AD ( MDM ) or Registered to Azure AD ( MAM ) , it block them from Joining Azure AD in the first place with the message:

We had to remove All Cloud Apps and change this just to Office 365 per below