It's a hard problem to explain succinctly but you're basically doing a delegation flow from the client to the target and both devices need to meet the various policies. It can fail because the client isn't trusted, or the client isn't allowed to delegate, or the target name can't resolve in AAD.