Authenticating to Microsoft Graph API... and Authenticating to Azure Service Management API... could use a catch for login being denied for a conditional access policy.
# Conditional Access Policy
ElseIf($RespErr -match "AADSTS53003")
{
Write-Output "[*] WARNING! The account $username appears to be protected by a Conditional Access Policy."
}