The Smartsheet desktop app currently uses an embedded browser (WebView/WebView2) for authentication and does not support using the system browser for OIDC sign-in.
This is why it fails Conditional Access policies that require device compliance or trusted client conditions.
Please add support for launching authentication in the system browser instead of an embedded WebView, so that Conditional Access policies requiring compliant or hybrid-joined devices can succeed.