locked
AD FS 3.0 - How to Compose Claim Rules to Count In Public IP Addresses RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    What IP address(es) to include into the Claim Rule(s) in order to allow access to domain365.com Skype for Business Online for only users from the Corporate office domain.local. Adding range 192.168.1.0 - 192.168.1.255 permits access for corporate network and home network users.

    Many thanks, in advance!

    Wednesday, October 26, 2016 3:56 AM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    Here's a good writeup on this topic: Configuring Client Access Policies

    Basically in the rules you build you're supposed to use the public IP of your client. So in your case in order to allow access from CORP you'd use 20.1.2.3 in the rules. The private IP's are not used/seen in the AD FS claims rule processing.

    http://setspn.blogspot.com

    Wednesday, November 2, 2016 11:50 PM