What does this ipv6 mean? I use a Mac Pro. Do I need the IPV6?

Oluwa, Akin 0 Reputation points
2023-02-24T15:29:00.8033333+00:00

What does this email mean?

"Action required: Add your IPv6 ranges to Conditional Access policies by 31 March 2023

We’re adding support for IPv6 to Azure AD—add your IPv6 ranges to Conditional Access policies by 31 March 2023

You’re receiving this notification because you use Azure Active Directory (Azure AD).

We recently announced that we’re adding support for IPv6 to Azure AD on 31 March 2023 to accommodate the growing adoption of IPv6 across enterprise networks and service providers.

Your organization uses IP-based named locations as part of Conditional Access and/or uses named locations that are marked as trusted to improve the accuracy of Azure AD Identity Protection detections. To ensure that your IPv6-capable devices are not blocked from authenticating through Azure AD when support for IPv6 is implemented, you’ll need to identify your IPv6 ranges and then add or update them in named locations.

If your networks don’t support IPv6, you don’t need to take any action to change your configurations or policies. We don’t currently plan to require IPv6 or to de-prioritize IPv4 in any Azure AD features or services.

Required action

If your organization has public IPv6 addresses representing your network, follow these steps before 31 March 2023 to avoid potential service disruptions:

  1. Work with your network administrators and internet service providers to identify your public-facing IPv6 addresses.
  2. Conduct an audit of existing named locations to anticipate potential impact.
  3. Review and update existing named locations to include the identified IPv6 ranges.
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,562 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Dillon Silzer 54,646 Reputation points
    2023-02-25T20:20:41.7233333+00:00

    Hello,

    As it states, if you are using IPv6 for your network infrastructure, you will need to updated your named locations Conditional Access Policy (if you have one). If you do not, then you may face lockouts of your tenant's accounts if they use an IPv6 IP address rather than IPv4 IP address.

    If you are not using a named locations policy to whitelist IP addresses, then you can simply ignore this e-mail.

    To check your named locations and Conditional Access follow the guide:

    https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition#ip-address-ranges

    User's image

    If this is helpful please accept answer.

    0 comments