How can we improve Azure Active Directory?

← Azure Active Directory

Ability to update Named Locations using PowerShell

We have around 200 locations that use dynamic IP addresses that change frequently. We have the ability to pull the public IP addresses via REST API/PowerShell, but there is currently no way to update the Named Locations list programmatically. Without PowerShell, we are forced to manually dump the list to a CSV and upload the new file.

We would like to have the ability to add, remove, update Named Locations and entries in the IP Ranges of a Named Location.

189 votes
Sign in
(thinking…)
Sign in with: Microsoft
Forgot password?
Create a password
Signed in as (Sign out)
Close
Close

We’ll send you updates on this idea

Patrick Meehan shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →

28 comments

Sign in
(thinking…)
Sign in with: Microsoft
Forgot password?
Create a password
Signed in as (Sign out)
Close
Close
Submitting...
An error occurred while saving the comment
  • Gio commented  ·   ·  Flag as inappropriate

    Another upvote for this! We really need this functionality for our automated onboarding experience.

  • Anonymous commented  ·   ·  Flag as inappropriate

    We update our locations during M&A changes. Adding or removing 20-30 IP ranges at a time in the GUI is time consuming. Powershell is needed here.

  • Cliff commented  ·   ·  Flag as inappropriate

    We have over 1500 sites now using SD-WAN and when ever there is a IP change we have a manual action to updated the named location. As we have the ability to request our SD-WAN IP changes via API it would be helpful if we could the ingest these via API to AAD. Is there any indication to when this will be available?

  • ME Admin commented  ·   ·  Flag as inappropriate

    Need this feature! How long does it take to complete a feature like this? It's been almost a year since MSFT had "begun this work".

  • Daniel Makinson commented  ·   ·  Flag as inappropriate

    Really need this feature to automate and tie in with Meraki and other Marketing platforms for whitelisting

  • Tim Nielsen commented  ·   ·  Flag as inappropriate

    There IS a way to do this at this time, however it relies on undocumented and unsupported features.
    Upside is, that it allows for script access to practically all everything available in the Azure Portal, but since this is undocumented, it is subject to changes without warning.

    I would not recommend looking into this option, unless you are a skilled PowerShell specialist.

  • Geoff commented  ·   ·  Flag as inappropriate

    I found a way to copy the list of trusted locations from the Azure MFA service settings however that is just a list of the IP ranges. A way to list them (get-namedlocation) so I could dump a csv with the details about the named locations would be very helpful along with the cmdlets to add/remove/modify the named locations.

  • Clint Swiney commented  ·   ·  Flag as inappropriate

    This is a much needed feature. Please add me to the beta. I have a need to export the list.
    Today the only way I can do it is to take screenshots!

← Previous 1

Azure Active Directory: Conditional Access

Categories

Feedback and Knowledge Base

(thinking…)
Hosted by UserVoice