This article shows how to proceed if you are getting a “Blocked by conditional access” message due to the location condition in your Azure Active Directory (AAD). The location condition is the most common condition and enables you to tie access controls to the network locations of your users.
The error can occour when setting up a DocumentsCorePack or AttachmentExtractor service indicating that we cannot access your Dynamics 365 instance due to the conditional access settings in your AAD:
Figure 1: Error message: Blocked conditional access
How to fix?
To avoid this error you will need to whitelist the IP ranges of the mscrm-addons.com services to allow for connecting our service to your Dynamics 365 instance:
- Configuration Website (Mandatory): Required to use our online service configuration to deploy and configure our solutions. Note: You will need to whitelist all of the following IPs:
- 168.63.53.239
- 168.63.54.28
- 168.63.55.25
- 168.63.53.163
- 168.63.54.173
- 168.63.53.240
- 168.63.54.122
- 168.63.54.38
- DocumentsCorePack service location: When setting up a DocumentsCorePack Service you can choose the data-center it should be hosted in. The IP Address of the corresponding data-center needs to be added (How to find the data center of my service?)
- UK South: 52.151.73.217
- EU North Live 1: 52.164.188.105
- EU North Live5: 40.113.90.52
- EU North Live8: 23.102.16.148
- EU North Public: 168.63.74.175
- EU West Live2: 40.74.52.6
- EU West Live3: 52.174.69.125
- US Central: 40.69.141.181
- US East2: 52.167.112.212
- US West2: 13.91.55.23
- South Central US: 23.102.182.180
- ASIA South East: 168.63.252.233
- Australia East: 13.73.199.37
- Australia Central: 20.36.33.201
- EU West Public: 104.214.237.148
- EU West Public2: 40.68.253.71
- AttachmentExtractor service location: When setting up an AttachmentExtractor Service you can choose the data-center it should be hosted in. The IP Address of the corresponding location needs to be added (How to find the data center of my service?)
- Australia East: 52.237.244.222
- North Europe: 13.74.177.65
- East US: 40.76.16.172
- US Central: 40.69.141.181
- UK South: 52.151.73.217
- UK West: 52.151.131.200
- DocumentscorePack PowerPlatform connector: If you plan to use our connector for PowerApps and PowerAutomate you will need to whitelist the following IPs:
- 13.69.228.10
- 52.164.222.21
- 52.164.220.227
- 52.164.217.107
- 52.164.217.78
- 52.164.217.56
- 52.164.220.102
- 52.169.151.169
- 52.164.217.164
- 104.41.230.241
That’s it! We appreciate your feedback! Please share your thoughts by sending an email to support@mscrm-addons.com.