Unable to sign in to Azure Account: Failed to sign in, unable to find valid certification path to requested target.

Azure Account Type: Enterprise Account
Login in the browser succeeds but fails in intellij with this error. Tried installing certificates in Intellij, downloaded from browser.
Azure Toolkit Version: 3.72.0-2022.2
IntelliJ Version: IntelliJ IDEA 2022.2 (Ultimate)

2023-02-02 16:01:16,876 [ 79898] SEVERE - c.a.c.h.p.RetryPolicy - {"az.sdk.message":"Retry attempts have been exhausted.","exception":"PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target","tryCount":3}
2023-02-02 16:01:16,893 [ 79915] SEVERE - c.a.c.h.p.RetryPolicy - javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
2023-02-02 16:01:16,895 [ 79917] SEVERE - c.a.i.InteractiveBrowserCredential - Azure Identity => ERROR in getToken() call for scopes [https://management.core.windows.net//.default]: Failed to acquire token with Interactive Browser Authentication.
2023-02-02 16:01:16,896 [ 79918] SEVERE - c.a.c.i.AccessTokenCache - Failed to acquire a new access token.
2023-02-02 16:01:16,897 [ 79919] SEVERE - c.a.c.h.p.RetryPolicy - {"az.sdk.message":"Retry attempts have been exhausted.","exception":"Failed to acquire token with Interactive Browser Authentication.","tryCount":0}
2023-02-02 16:01:16,897 [ 79919] WARN - r.n.h.c.HttpClientConnect - [85e9b690, L:/10.62.213.229:0 ! R:login.microsoftonline.com/40.126.28.19:443] The connection observed an error
io.netty.handler.codec.DecoderException: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:499)
at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:290)
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:444)
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420)
at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412)
at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1410)
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:440)
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420)
at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:919)
at io.netty.channel.kqueue.AbstractKQueueStreamChannel$KQueueStreamUnsafe.readReady(AbstractKQueueStreamChannel.java:544)
at io.netty.channel.kqueue.AbstractKQueueChannel$AbstractKQueueUnsafe.readReady(AbstractKQueueChannel.java:383)
at io.netty.channel.kqueue.KQueueEventLoop.processReady(KQueueEventLoop.java:213)
at io.netty.channel.kqueue.KQueueEventLoop.run(KQueueEventLoop.java:291)
at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:997)
at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74)
at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30)
at java.base/java.lang.Thread.run(Thread.java:833)

No source file, test, or entry point is named. Start by reproducing the Azure Enterprise Account sign-in with Azure Toolkit 3.72.0 in IntelliJ IDEA 2022.2, then inspect the reported PKIX and SSLHandshakeException logs; done means the authentication failure is isolated and a verified resolution is identified.