How can we improve Azure Active Directory?

← Azure Active Directory

Ability to update Named Locations using PowerShell

We have around 200 locations that use dynamic IP addresses that change frequently. We have the ability to pull the public IP addresses via REST API/PowerShell, but there is currently no way to update the Named Locations list programmatically. Without PowerShell, we are forced to manually dump the list to a CSV and upload the new file.

We would like to have the ability to add, remove, update Named Locations and entries in the IP Ranges of a Named Location.

164 votes
Sign in
(thinking…)
Sign in with: Microsoft
Forgot password?
Create a password
Signed in as (Sign out)
Close
Close

We’ll send you updates on this idea

Patrick Meehan shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →

24 comments

Sign in
(thinking…)
Sign in with: Microsoft
Forgot password?
Create a password
Signed in as (Sign out)
Close
Close
Submitting...
An error occurred while saving the comment
  • Cliff commented  ·   ·  Flag as inappropriate

    We have over 1500 sites now using SD-WAN and when ever there is a IP change we have a manual action to updated the named location. As we have the ability to request our SD-WAN IP changes via API it would be helpful if we could the ingest these via API to AAD. Is there any indication to when this will be available?

  • ME Admin commented  ·   ·  Flag as inappropriate

    Need this feature! How long does it take to complete a feature like this? It's been almost a year since MSFT had "begun this work".

  • Daniel Makinson commented  ·   ·  Flag as inappropriate

    Really need this feature to automate and tie in with Meraki and other Marketing platforms for whitelisting

  • Tim Nielsen commented  ·   ·  Flag as inappropriate

    There IS a way to do this at this time, however it relies on undocumented and unsupported features.
    Upside is, that it allows for script access to practically all everything available in the Azure Portal, but since this is undocumented, it is subject to changes without warning.

    I would not recommend looking into this option, unless you are a skilled PowerShell specialist.

  • Geoff commented  ·   ·  Flag as inappropriate

    I found a way to copy the list of trusted locations from the Azure MFA service settings however that is just a list of the IP ranges. A way to list them (get-namedlocation) so I could dump a csv with the details about the named locations would be very helpful along with the cmdlets to add/remove/modify the named locations.

  • Clint Swiney commented  ·   ·  Flag as inappropriate

    This is a much needed feature. Please add me to the beta. I have a need to export the list.
    Today the only way I can do it is to take screenshots!

  • Anonymous commented  ·   ·  Flag as inappropriate

    Is there an ETA on this? Not being able to bulk import for over 700 sites is a big drawback. Being able to bulk import all the various subnets in CIDR form, along with additonal columns for fields like Name, IP Addr or Region, Mark as Trusted (Y or N). Should also show a Preview before applying. Highlight any matches to existing subnets, or which subnets are new, etc.

  • Shameer Ahuja commented  ·   ·  Flag as inappropriate

    We have around 400 locations that use dynamic IP addresses that change frequently. We have the ability to pull the public IP addresses via REST API/PowerShell, but there is currently no way to update the Named Locations list programmatically. Without PowerShell, we are forced to manually dump the list to a CSV and upload the new file.

    We would like to have the ability to add, remove, update Named Locations and entries in the IP Ranges of a Named Location.

← Previous 1

Azure Active Directory: Conditional Access

Categories

Feedback and Knowledge Base

(thinking…)
Hosted by UserVoice