Trusted IP license question

%3CLINGO-SUB%20id%3D%22lingo-sub-859292%22%20slang%3D%22en-US%22%3ETrusted%20IP%20license%20question%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-859292%22%20slang%3D%22en-US%22%3E%3CP%3EJust%20got%20off%20the%20phone%20with%20a%20365%20tech%20but%20wanted%20to%20post%20here%20to%20double%20check%20his%20answer.%20I%E2%80%99m%20trying%20to%20implement%20the%20%E2%80%9CTrusted%20IP%E2%80%9D%20list%20for%20365%20MFA%20but%20when%20I%20go%20to%20check%20for%20it%20under%20service%20settings%2C%20it%E2%80%99s%20not%20present.%20I%20opened%20a%20ticket%20about%20it%20but%20the%20tech%20I%20spoke%20with%20wasn%E2%80%99t%20even%20aware%20of%20that%20feature%20and%20had%20to%20call%20me%20back%20so%20I%E2%80%99m%20a%20bit%20weary%20he%20has%20given%20me%20the%20correct%20info.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHe%20mentioned%20since%20we%20only%20have%20a%20P1%20license%20we%20will%20not%20be%20able%20to%20see%20the%20feature.%20He%20said%20that%20I%20would%20only%20have%20to%20add%20the%20P2%20license%20to%20my%20admin%20account%2C%20then%20I%20would%20be%20able%20to%20implement%20the%20%E2%80%9CTrusted%20IP%E2%80%9D%20feature.%20After%20checking%20the%20pricing%20link%2C%20it%20looks%20like%20it%E2%80%99s%20an%20additional%20%249.%3C%2FP%3E%3CP%3EIs%20it%20true%20that%20I%20would%20only%20need%20it%20for%20my%20admin%20account%20and%20not%20all%20users%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESetting%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fauthentication%2Fhowto-mfa-mfasettings%23trusted-ips%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fauthentication%2Fhowto-mfa-mfasettings%23trusted-ips%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPricing%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fazure.microsoft.com%2Fen-ca%2Fpricing%2Fdetails%2Factive-directory%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fazure.microsoft.com%2Fen-ca%2Fpricing%2Fdetails%2Factive-directory%2F%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-859292%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-859388%22%20slang%3D%22en-US%22%3ERe%3A%20Trusted%20IP%20license%20question%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-859388%22%20slang%3D%22en-US%22%3EWe%20are%20on%20P1%20and%20have%20the%20Trusted%20IP%20settings%20in%20the%20MFA%2FService%20Settings%20page.%20I%20don't%20know%20why%20you%20don't%20have%20it%20or%20why%20the%20tech%20was%20insisting%20you%20have%20to%20have%20P2%20when%20that%20is%20not%20the%20case.%20Appears%20that%20tech%20has%20no%20idea%20what%20they%20are%20talking%20about.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-859450%22%20slang%3D%22en-US%22%3ERe%3A%20Trusted%20IP%20license%20question%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-859450%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20can%20achieve%20the%20same%20effect%20using%20the%20Named%20locations%20functionality%3A%26nbsp%3B%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fportal.azure.com%2F%23blade%2FMicrosoft_AAD_IAM%2FConditionalAccessBlade%2FNamedNetworksV2%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fportal.azure.com%2F%23blade%2FMicrosoft_AAD_IAM%2FConditionalAccessBlade%2FNamedNetworksV2%3C%2FA%3E%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EStill%20P1%2C%20so%20you%20should%20have%20no%20trouble%20accessing%20it.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-859453%22%20slang%3D%22en-US%22%3ERe%3A%20Trusted%20IP%20license%20question%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-859453%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F2707%22%20target%3D%22_blank%22%3E%40Cary%20Siemers%3C%2FA%3E%26nbsp%3BStrange%2C%20I%20don't%20see%20it.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F132184iB4AB325071EC4147%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%222019-09-17_11-15-18.png%22%20title%3D%222019-09-17_11-15-18.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-859456%22%20slang%3D%22en-US%22%3ERe%3A%20Trusted%20IP%20license%20question%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-859456%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3E%26nbsp%3BI%20checked%20there%20before%20posting%20here%20but%20it's%20all%20grayed%20out%20for%20me.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F132185i92509C326C9C45DD%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%222019-09-17_13-45-25.png%22%20title%3D%222019-09-17_13-45-25.png%22%20%2F%3E%3C%2FSPAN%3Ehere%20but%20it's%20all%20grayed%20out%20for%20me%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-861161%22%20slang%3D%22en-US%22%3ERe%3A%20Trusted%20IP%20license%20question%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-861161%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F55099%22%20target%3D%22_blank%22%3E%40Paul%20Storic%3C%2FA%3E%26nbsp%3BSo%20I%20figured%20out%20that%20while%20I%20was%20able%20to%20access%20aAure%20via%20the%20o365%20admin%20portal%20%26gt%3B%20admin%20center%2C%20I%20didn%E2%80%99t%20actually%20have%20an%20AAD%20license.%20I%20signed%20up%20for%20the%20P2%20trial%20(there%20was%20no%20P1%20option)%20and%20boom%20I%20was%20able%20to%20add%20in%20the%20trusted%20IP%20for%20my%20client.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E*UPDATE%26nbsp%3B%20-%20Found%20the%20P1%20option%20but%20it%20wasn't%20within%20the%20Azure%20portal%2C%20it%20was%20back%20in%20the%20365%20Admin%20portal%20under%20billing%20%26gt%3B%20Purchase%20Services%20which%20was%20a%20bit%20confusing.%20Why%20would%20they%20offer%20the%20P2%20and%26nbsp%3B%3CSPAN%3EEnterprise%20Mobility%26nbsp%3B%2B%20Security%20E5%20trials%20directly%20un%20Azure%20and%20not%20the%20P1%3F%20Anyway%2C%20I%20was%20able%20to%20add%20the%20P1%20license%20to%20my%20admin%20account%20so%20when%20my%20P2%2030%20days%20trial%20is%20over%2C%20it%20will%20fall%20back%20to%20P1.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Contributor

Just got off the phone with a 365 tech but wanted to post here to double check his answer. I’m trying to implement the “Trusted IP” list for 365 MFA but when I go to check for it under service settings, it’s not present. I opened a ticket about it but the tech I spoke with wasn’t even aware of that feature and had to call me back so I’m a bit weary he has given me the correct info.

 

He mentioned since we only have a P1 license we will not be able to see the feature. He said that I would only have to add the P2 license to my admin account, then I would be able to implement the “Trusted IP” feature. After checking the pricing link, it looks like it’s an additional $9.

Is it true that I would only need it for my admin account and not all users?

 

Setting:

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings#trusted...

 

Pricing:

https://azure.microsoft.com/en-ca/pricing/details/active-directory/

 

 

5 Replies
Highlighted
We are on P1 and have the Trusted IP settings in the MFA/Service Settings page. I don't know why you don't have it or why the tech was insisting you have to have P2 when that is not the case. Appears that tech has no idea what they are talking about.
Highlighted

You can achieve the same effect using the Named locations functionality: https://portal.azure.com/#blade/Microsoft_AAD_IAM/ConditionalAccessBlade/NamedNetworksV2

 

Still P1, so you should have no trouble accessing it.

Highlighted

@Cary Siemers Strange, I don't see it.

 

2019-09-17_11-15-18.png

Highlighted

@Vasil Michev I checked there before posting here but it's all grayed out for me.

 

2019-09-17_13-45-25.pnghere but it's all grayed out for me

 

 

Highlighted

@Paul Storic So I figured out that while I was able to access aAure via the o365 admin portal > admin center, I didn’t actually have an AAD license. I signed up for the P2 trial (there was no P1 option) and boom I was able to add in the trusted IP for my client.

 

*UPDATE  - Found the P1 option but it wasn't within the Azure portal, it was back in the 365 Admin portal under billing > Purchase Services which was a bit confusing. Why would they offer the P2 and Enterprise Mobility + Security E5 trials directly un Azure and not the P1? Anyway, I was able to add the P1 license to my admin account so when my P2 30 days trial is over, it will fall back to P1.