Restrict Azure Active Directory Application Access based on IP addresses

Question

I need to restrict access to Azure Active Directory Application. Just allowed sub-nets can access Active Directory Application. Where can I configure that IP range in AD application that will restrict access for other sub-nets to that application? Any help will be appreciated.

Answer 1

AFAIK , Azure AD can't config your app access rule base on the sub-net address range currently. If the server which app published and your sub-net are in same local network ,in the application , you could check visitor's private ip address( Internal ip address) to meet the requirement, you could try retrieving a visitor's IP address from the Request Headers by using the UserHostAddress property of the HttpRequest object : Request.UserHostAddress .