This blog article refers to Azure Active Directory (AAD) and outlines how to proceed if you are using the location condition in AAD conditional access and get the following error message “Blocked by conditional access”. This error message can occur when creating a service for AttachmentExtractor or DocumentsCorePack.
The location condition is the most common condition and enables you to tie access controls to the network locations of your users. More information on how to configure the location condition can be found in this article.
Error handling
The following error message “Blocked by conditional access” means that we cannot access your Dynamics 365. The location condition in your AAD blocks access for users accessing a service from specific countries/regions or IP ranges.
Figure 1: Error message: Blocked conditional access
IMPORTANT : The Configuration WebSite IP must always be whitelisted if conditional access is enabled, regardless of the actual datacenter the service will be installed on!
168.63.53.239, 168.63.54.28, 168.63.55.25, 168.63.53.163, 168.63.54.173, 168.63.53.240, 168.63.54.122, 168.63.54.38
You must extend your local condition by the service data centers too.
IP addresses of the instances:
| EU North Live4 | 52.164.188.105 |
| EU North Live2 | 40.113.90.52 |
| EU West Live2 | 40.74.52.6 |
| EU West Live3 | 52.174.69.125 |
| US Central | 40.69.141.181 |
| US East2 | 52.167.112.212 |
| US West2 | 13.91.55.23 |
| Australia East | 13.73.199.37 |
Figure 2: Instances
If your data center is not listed here, please contact our support for further details.
That’s it! We appreciate your feedback! Please share your thoughts by sending an email to support@mscrm-addons.com.