Issue : Error while authenticating to IAP Desktop.
Error Message: Access to your account data is restricted by policies within your organization. Please contact the administrator of your organization for more information.
Error Code: Error 400: admin_policy _enforced
Error Screenshot :
How to Fix this ?
Pre-requisites : You should have administrative rights to Cloud Identity (Google Admin) console.
Navigate to Security Section within Cloud Identity
Access and Data Control ==> API controls
Select the Cloud Platform and check Unrestricted: Any user-approved app can access a service.
Then Click on Change.
Re-Login using IAP Desktop, issue will be fixed.
Technical Blog... 