Minimum set of Urls and IP address ranges to allow SSPR:
We have a secure environment where users access Office 365 using a VDI solution hosted in Azure. Cloud only identities are used and AD DS is implemented for logging on to VDI (Windows 2016 RDS sessions)
web filtering prevents the users from accessing Office 365 and associated services directly from their corporate devices.
This creates a situation when users are unable to access SSPR to reset their own passwords from their devices, and without valid creds they cannot log on to VDI to perform the reset from there, where access is allowed.
We want to configure web filtering to allow access SSPR from the corporate network, without allowing access to any other services e.g. office.com
I could use network trace in Fiddler to work out the URLs but hoping for something more supportable.