Adding a named location without breaking Conditional Access

4slides. Screenshot a slide, download it as a PNG, or use your browser's Print → Save as PDF for a LinkedIn-ready multi-page carousel — each slide becomes one page.

solvingmicrosoft365.com

1 / 4

Adding a named location without breaking Conditional Access

How to add or change a named location in Entra without breaking Conditional Access: MFA and risk side effects, the report-only sequence, the egress-IP trap.

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/conditional-access-named-locations-rollout

Slide 1Download PNG

solvingmicrosoft365.com

2 / 4

What is a named location in Conditional Access?

A named location is a set of IP ranges or countries you define once in Entra and reuse in policies — for example to skip MFA on the office network, to block sign-ins from countries you never operate in, or to mark an IP…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/conditional-access-named-locations-rollout

Slide 2Download PNG

solvingmicrosoft365.com

3 / 4

Should I exclude the office IP from MFA?

Increasingly, no. Trusting the office network assumes the network is safe, which a compromised laptop on the Wi-Fi disproves. Modern baselines require MFA everywhere and use named locations to block impossible countries…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/conditional-access-named-locations-rollout

Slide 3Download PNG

solvingmicrosoft365.com

4 / 4

Why did adding a named location cause MFA prompts to change?

Marking a location as trusted changes how Identity Protection scores sign-ins and how policies with a location condition evaluate. A wrong egress address, or a range that overlaps a home ISP, either suppresses MFA where…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/conditional-access-named-locations-rollout

Slide 4Download PNG

Auto-generated from Adding a named location without breaking Conditional Access. This page is not indexed and isn't part of the guide itself.