{"id":13548,"date":"2023-09-05T10:07:23","date_gmt":"2023-09-05T14:07:23","guid":{"rendered":"https:\/\/itcloud.absoludev.ca\/?page_id=13548"},"modified":"2024-08-27T11:35:18","modified_gmt":"2024-08-27T15:35:18","slug":"how-to-allow-access-to-microsoft-365-data-only-from-canada","status":"publish","type":"page","link":"https:\/\/itcloud.absoludev.ca\/en\/how-to-allow-access-to-microsoft-365-data-only-from-canada\/","title":{"rendered":"How to allow access to Microsoft 365 data only from Canada"},"content":{"rendered":"\t\t
\r\n\t\t\t\t
\r\n\t\t\t\t\t
\r\n\t\t\t\t
\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\r\n\t\t\t\t\t<\/div>\r\n\t\t\t\t<\/div>\r\n\t\t
\r\n\t\t\t\t\t
\r\n\t\t\t\t
\r\n\t\t\t\t\t

How to allow access to Microsoft 365 data only from Canada<\/h1>\t\t\t\t<\/div>\r\n\t\t\t\t
\r\n\t\t\t\t\t\t\t\t\t

Situation<\/strong><\/h3>

Multi-factor authentication is not enabled for users at your client, but now you are being asked the following question:<\/p>

Is there not a way to protect users in the event that some have used the organization’s 365 username and password to access non-Microsoft sites which could be compromised?<\/strong><\/span><\/p><\/blockquote>

You can tell them that yes there is a way to solve this situation. The solution is to use Conditional Access policies.<\/p>


Context<\/strong><\/h3>

These days bad actors obtain lists containing usernames and passwords from sites that have suffered security breaches.\u00a0 These lists are used, from different countries, to attempt to access the organization’s resources.<\/p>

The best solution would be to enable multi-factor authentication.<\/p>

\u201cWith strong multi-factor authentication (MFA) in Azure Active Directory (Azure AD), protect your organization from breaches related to lost or stolen credentials.\u201d1<\/sup><\/p>

However, it may not be possible to enable multi-factor authentication for various reasons.<\/p>


Solution<\/strong><\/h3>

It is possible to only allow access to organizational resources from targeted locations by means of \u201cUsing the location condition in a Conditional Access policy\u201d available in Azure Active Directory now called Microsoft Entra ID.<\/p>

To meet the customer’s needs, the Conditional Access policy should allow the users in question to only access organization resources from a named location.<\/p>

A named location can be defined as follows in the following scenarios:<\/p>