Conditional Access : block access based on country

Share on facebook
Share on google
Share on twitter
Share on linkedin
Share on pinterest
Share on print
Share on email
Table of Contents

introduction

in coming  articles we will  see how to apply conditional access with varias requirements 

pleas join us 

Pioneers OBS

before stat apply Conditional Access : we need to understand the Organization Breakdown Structure for company Pioneers OBS 

 

For Better View > Open Image in different TAB
For Better View > Open Image in different TAB
For Better View > Open Image in different TAB
For Better View > Open Image in different TAB
For Better View > Open Image in different TAB
For Better View > Open Image in different TAB

company requirements

company pioneers has the following requirements 

  • any user from sales department who access from outside Saudi Arabia , from any platform should be BLOCKED 
  •  

define Location Saudi Arabia

since we will BLOCK any access for SALES department from outside Saudi Arabia 

the first step is to define location Saudi arabia as trusted site 

login to portal azure https://portal.azure.com >> conditional access >> location 

login to portal azure https://portal.azure.com >> conditional access >> location 
select country
add location saudi arabia and set location name
location created

Create Conditional Access Policy

NOW it is time to create policy to block sales department to access office 365 from outside saudi arabia 

select condition access >> policies >> create policy 

select condition access >> policies >> create policy 
set policy name and targeted group
select all apps
select location ALL location but excep saudi arabia
select location ALL location but excep saudi arabia
access control >> select block access
enable policy and create
policy created

how policy applied

user salem@networkspioneers.com is member of sales group (please check organization OBS above ) 

user salem connect to office.com from united sta (outside Saudi Arabia ) 

let us to see whet will happened 

run VPN and conect from united state
salem blocked as he is member of group sales
policy report

conlusion

this article we  have seen how to block group sales to access ofice.com outside saudi arabia 

next article we will apply conditional access policy with different requirements 

please be tuning 

Share this post
Share on facebook
Share on google
Share on twitter
Share on linkedin
Share on pinterest
Share on print
Share on email

About Me

Our Power in Numbers

 17 

Courses

321

Articles

3,882

Images
and All configurations images are proudly made in Pioneers Lab

Articles By Course

Recent Articles

Subscribe

Contact us

have a challenge ? don’t hesitate to contact us