Forum Discussion
Block access to 365 Login page from overseas
Greetings, We are looking into options to prevent DOS attacks into our tenant. Is it possible to prevent a user from reaching the 365 login page from overseas? We currently have a CA enabled to ...
Unfortunately, the only way to block authentication by IP is by using a federated identity provider. As you stated, Conditional Access is an authorization tool that is only able to block by location AFTER authentication has already occurred.
The only potential workaround is a bit of a hack - use custom branding to pull in your own CSS served from your own web server. In doing this, you can use rules on your web server to serve up different CSS based on request origin. This likely won't trip up automated tooling, but anyone (including your users or via AitM) trying to log in interactively would likely not figure it out ;)