Forum Discussion
What are the FQDNs used for Office 365 logon and authentication?
You may referring this:
Office 365 URLs and IP address ranges - Microsoft 365 Enterprise | Microsoft Learn
I mentioned that in my original post, quote "I found this list https://learn.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide of all URLs and IPs that Microsoft tries to use for Office 365, and I tried adding"
That link, in the word here, goes to that post you mentioned. Did you read my original post, or click the link?
That is a huge list though. I only want URLs that pertain to authentication for Office 365. Not random stuff to make skype, onedrive sync, etc work.
Hi,
did you solve this issue ?
We have the same problem.
Let me know
Thanks
When you have a chance to look at the URL, you can realize it needs to allow based on what you want but not Office 365 since quite a huge of productivity platform, there is NO one go for ALL Office 365 services and not practical, nor FQDN but URL and IP address to allow for the authentication, hope clear your understanding here.
For how to have a systematic way for the allowed list handling, you may consider firewall feature on category release, or further study how your 'authentication' means? Say protocols, devices, authentication method, etc.
- This is not practical. We run a secure computer lab. We don't need or want the vast majority of these IPs. I know you don't work for Microsoft directly, and are an MCT in Hong Kong. Perhaps you can sympathize with my question. All we want are URLs - not even IP addresses, since I know that Microsoft operates random huge IP pools that can change at any time - just URLs, FQDNs, that we can allow that will handle authentication for Office 365. That's it.
I'm afraid I'm not quite understanding your post.
Why is it so difficult for Microsoft to have a single FQDN URL to handle Office 365 authentication? At least, for the USA where I am located.
Like I said, I know the issue is that I'm not being lax enough on my firewall rules. We run a secure ship here, and I'm not interested in opening thousands of IPs and URLs. I just want authentication to Office 365.
