Conditional Access to Proxied Enterprise App by IP only

[Deleted]

Hello,

I'd like to restrict access to Azure enterprise app by IP only. I can create a location with IPs, but then I am forced to pick something in "Grant" or "Session" category - which I don't want, I just want to restict by IP. How do I go about that?

thanks

[#2]

@Deleted Hi, given that you want to configure so that only corporate IPs can connect to the app I would use the guidance from doc:

If you need to configure a location condition that applies to all connections made from outside your organization's network:

• Include All locations
• Exclude All trusted IPs

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/best-practices#what-you-should-know

And the action would then be "Block" to that specific app.

Regards,

Viktor