Can Azure Active Directory conditional access policy be used to allow requests from particular IP addresses?

520 views Asked by At

We have application registered on Active Directory. We want to restrict access to the application by IP Addresses , I found conditional policy seems to be exact fit. But what I found in documentation is it can be used to restrict traffic from certain IP addresses and countries. Can this feature be used other way to allow requests from certain specified IP addresses only? Any requests coming from IP address not specified should be rejected.

1

There are 1 answers

6
Nishant On BEST ANSWER

This can be achieved by using the 'Location' Condition in Access Control. For e.g. selecting 'Any location' causes a policy to be applied to all IP addresses, which means any address on the Internet. This setting is not limited to IP addresses you have configured as named location. When you select Any location, you can still 'exclude specific locations' from a policy. For example, you can apply a policy to all locations except trusted locations to set the scope to all locations, except the corporate network. This way you can effectively allow requests from a particular IP address/Location and block all others.

For more information, You can refer to Location condition in policy. You can also use Report-only mode or What If tool to evaluate the impact of the policy before enforcement.