When users try to register their mobile app at, they will be blocked if they are out of the trusted network. I would suggest you add your break glass account to the exception list. If you are familiar with conditional access rules you can continue without adding excluded users. Once you click the create you might get a warning in the policy that shows that there is a risk that you might block yourself. Provide a name for the policy and choose all users or specific groups or users based on your requirement.Ĭhoose “User actions” under the “Cloud apps or actions” tab and marked the “Register security information” option.Ĭonfigure the location option and choose Any location.Įxclude the Internal network under the Exclude tab.Īccess control is going to block access mode as we are going to block the user registration from all networks except our internal network.Įnable the policy “On’ and create the policy We are going to create a new conditional access policy.

I am going to explain how you can create Conditional Access policy to limit the security info registration page for the only internal network.Īs a first step, we are going to add our internal network IP range into the Conditional Access named locations as a trusted network.Ĭlick Named locations and then IP ranges locationĭefine a location name and add your network IP subnet and marked as a trusted network.Īs you can see our location has been defined. In this scenario, we can leverage the Conditional Access policy to require an MFA registration process only for specific locations. The risk is that you might not want to allow the initial registration process from unwanted locations or allow only for the internal network. You might force the initial MFA registration or allow users to register their security info themself on the Portal. As we all know that allowing users to access applications Internal/Outside of the network only with the only password will not protect our data as weak passwords can be compromised and known easily.Īzure AD provides you Multi-Factor Authentication (MFA) services that you can use as a secondary authentication method for the users while accessing your resources to reduce the risks. Using Conditional Access with the Azure AD helps you to control and secure your organization while accessing corporate apps.

Azure conditional access mfa