Can we restrict Users from accessing Office 365 (on Azure) from certain IP address?

Question

We are accessing office 365 Mailbox on Azure cloud from AWS Virtual Private cloud through OAUTH 2.0. How can we impose restriction to allow Office 365 is accesible from only IP Address range of AWS VPC?

vasilmichev · Answer

You either need to use Conditional Access (https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-location) or redirect the auth process to some external system (federation) and impose the restrictions there.

aravindkonda · Answer

I meant certain IP addressesAravindKonda&nbsp;

aravindkonda · Answer

Thanks Vasil. I doubt we have premium subscription to utilize conditional access. Can you share more details on option&nbsp; &nbsp;"redirect the auth process to some external system (federation) and impose the restrictions there".

vasilmichev · Answer

Read here:&nbsp;https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-fed

aravindkonda · Answer

Hi Vasil,&nbsp; &nbsp;As Office 365 is accessed from AWS VPC cloud , what IP addresses I need to provide while whitelisting IP address using conditional access of Azure Active Directory. I have with me details of AWS VPC CIDR , but CIDR range is private Ip addresses. I think I need to provide public IP addresses in AAD configuration , so what IP address from AWS I should be looking for?

Forum Discussion

Can we restrict Users from accessing Office 365 (on Azure) from certain IP address?

10 Replies