This article shows how to proceed if you are getting a “Blocked by conditional access” error message due to the location condition in your Microsoft Entra ID (formerly known as Azure Active Directory). The location condition is the most common condition and enables you to tie access controls to the network locations of your users.
The error can occur when setting up a DocumentsCorePack or AttachmentExtractor service indicating that we cannot access your Dynamics 365 instance due to the conditional access settings in your Microsoft Entra ID:
How to fix Blocked by Conditional access?
To avoid this error you will need to whitelist the IP ranges of the mscrm-addons.com services to allow for connecting our service to your Dynamics 365 instance.
Configuration Website (Mandatory)
This is required to use our online service configuration to deploy and configure our solutions. We have different regions in place to which you get automatically redirected based on your location. Note: You will need to whitelist all IPs of the according region.
- Europe & Africa (default)
- Customer location: Europe, Africa
- IP(s) to whitelist: 52.236.18.167
- North, Central & South America:
- Customer location: United States, Canada, Mexico, Argentina, Barbados, Bolivia, Brazil, Bahamas, Chile, Colombia, Costa Rica, Ecuador, Guatemala, Nicaragua, Panama, Peru, Puerto Rico, Paraguay
- IP(s) to whitelist: 172.171.90.48
- Australia, Asia & Middle East
- Customer location: Australia, New Zealand, Bahrain, China, United Arab Emirates (UAE), India, Indonesia, Israel, Japan, Jordan, Cambodia, Qatar, Kuwait, Lebanon, Malaysia, Philippines, Saudi Arabia, Singapur, South Korea, Thailand, Vietnam
- IP(s) to whitelist: 4.196.24.184
Office Add-In
This is required to use the Office Add-In for Word.
- IP(s) to whitelist: 128.251.1.213 and 4.210.102.111
DocumentsCorePack service location
When setting up a DocumentsCorePack service, you can choose the data center it should be hosted in. The IP address of the corresponding data center needs to be added (see section 1. Overview here):
| Data Center | IP Address |
| UK Public | 20.0.231.52 |
| UK Public 2 | 172.167.160.161 |
| UK South | 52.151.73.217 |
| UK West | 51.104.60.28 |
| EU North Public2 | 40.115.109.232 |
| EU North Live1 | 52.164.188.105 |
| EU North Live5 | 40.113.90.52 |
| EU North Live8 | 23.102.16.148 |
| EU North Live2 | 168.63.74.175 |
| EU North TC | 13.74.149.195 |
| EU West Live1 | 104.214.237.148 |
| EU West Live2 | 40.74.52.6 |
| EU West Live3 | 52.174.69.125 |
| EU West Live6 | 40.68.253.71 |
| EU West Public | 20.126.75.194 |
| US Central | 40.69.141.181 |
| US East2 | 52.167.112.212 |
| US West2 | 13.91.55.23 |
| South Central US | 23.102.182.180 |
| ASIA South East | 168.63.252.233 |
| Australia East | 13.73.199.37 |
| Australia Central | 20.36.33.201 |
| EU Germany Public | 20.52.152.52 |
| Swiss North | 172.161.88.120 |
| Canada Central | 4.206.42.138 |
| New Zealand | 172.204.91.64 |
AttachmentExtractor service location
When setting up an AttachmentExtractor service, you can choose the data-center it should be hosted in. The IP address of the corresponding location needs to be added (see section 1. Overview here)
| Data Center | IP Address |
| Australia East | 52.237.244.222 |
| North Europe | 13.74.177.65 |
| East US | 40.76.16.172 |
| US Central | 40.69.141.181 |
| UK South | 52.151.73.217 |
| UK West | 51.137.131.200 |
| Canada Central | 4.206.42.138 |
DocumentscorePack PowerPlatform connector
If you plan to use our connector for PowerApps and PowerAutomate you will need to whitelist the following IPs:
- Europe & Africa: 20.13.198.111, 52.236.16.36
- North, Central & South America: 20.185.49.237, 20.185.50.205
- Australia, Asia & Middle East: 20.191.250.31, 20.191.250.65
That’s it! We appreciate your feedback! Please share your thoughts by sending an email to support@mscrm-addons.com.