简体繁体 English

将IP地址身份验证添加到Windows Azure AD或SharePoint Online？

[英]Add IP Address Authentication to Windows Azure AD or SharePoint Online?

原文 2016-03-01 13:39:16 6 1 azure/ azure-active-directory/ sharepoint-online

We need IP Address Authentication for a SharePoint Online Website: only users from specific IP ranges should be (automatically) authenticated and permitted to enter the page. 我们需要SharePoint Online网站的IP地址身份验证：仅（自动）对特定IP范围的用户进行身份验证并允许其进入页面。 This is offered by several Identity Management providers but I do not see anything permitting such an implementation (C# etc.) or configuration with WAAD or SharePoint Online. 这是由多个身份管理提供程序提供的，但是我看不到任何允许使用WAAD或SharePoint Online进行这种实现（C＃等）或配置的东西。 Am I missing something. 我错过了什么吗？

The alternative would be to add an additional Identity Provider that provides this capability and then federate it via SAML/WSFed with WAAD. 替代方法是添加一个额外的身份提供程序来提供此功能，然后通过SAML / WSFed与WAAD对其进行联合。

Other ideas? 还有其他想法吗？

1 个解决方案

I understand your need, and I have heard this from other customers too. 我了解您的需求，我也从其他客户那里听到了这一消息。 But as of today, there is no option to whitelist IP address for authentication. 但是到目前为止，还没有将IP地址列入白名单进行身份验证的选项。 The only option available for customers today is to Whitelist IP addresses for MFA (ie do not enforce MFA when user is logging in from whitelisted IP address). 今天，客户可用的唯一选项是将MFA的IP地址列入白名单（即，当用户从列入白名单的IP地址登录时，不强制执行MFA）。

Funny enough, this request is not even on the Feature requests lists: https://feedback.azure.com/forums/169401-azure-active-directory - if you put it there, you got my 3 votes and a chance for implementation. 有趣的是，此请求甚至不在功能请求列表中： https : //feedback.azure.com/forums/169401-azure-active-directory-如果放在那里，您将获得我的3票和实现的机会。