Microsoft Entra Suite Tech Accelerator
Aug 14 2024, 07:00 AM - 09:30 AM (PDT)
Microsoft Tech Community

Conditional Access to Proxied Enterprise App by IP only

Deleted
Not applicable

Hello,

 

I'd like to restrict access to Azure enterprise app by IP only. I can create a location with IPs, but then I am forced to pick something in "Grant" or "Session" category - which I don't want, I just want to restict by IP. How do I go about that?

thanks

1 Reply

@Deleted Hi, given that you want to configure so that only corporate IPs can connect to the app I would use the guidance from doc:

 

If you need to configure a location condition that applies to all connections made from outside your organization's network:

  • Include All locations
  • Exclude All trusted IPs

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/best-practices#what-you-should-know

 

And the action would then be "Block" to that specific app.

 

Regards,

 

Viktor