Skip to main content

Locations

A location is a named place that a sign-in can come from. It is made of IP address ranges (such as your school network), countries, or both. You use locations in access policies, for example to skip the extra check on the school network, or to block sign-ins from overseas.

Who can use this page: MFA Policy Manager or Global Administrator.

The Locations page, listing locations such as School network and Australia.

Create a location​

  1. Select Add Location.
  2. Enter a Name that explains the place, for example "Main campus network".
  3. In IP Ranges, select Add IP Address and enter an address or range. You can use:
    • a single IPv4 address, such as 203.0.113.10
    • a single IPv6 address
    • a range in CIDR format, such as 203.0.113.0/24
  4. In Countries, select Add Country and choose one or more countries.
  5. Select Save.
A location being edited, showing the IP Ranges and Countries panels.
Finding your school's IP addresses

Ask your IT team or internet provider for your school's public IP addresses. You can also look at the IP address in the Sign-in Logs for a sign-in you know came from school.

Edit or delete a location​

  1. Open the location and select Edit Location.
  2. Add or remove IP ranges and countries, or change the name.
  3. Select Save. Or select Delete Location and confirm.

How locations affect sign-in​

A sign-in matches a location when it comes from one of the location's IP ranges, or from one of its countries. AuthCop works out the country from the sign-in's internet address.

Access policies use locations in two ways:

  • Included Locations make the policy apply to sign-ins from that place.
  • Excluded Locations stop the policy applying to sign-ins from that place.

When you change a location, every policy that uses it is updated. The change reaches the sign-in page after a short delay.

warning

Check which access policies use a location before you change or delete it. Changing a location can change who is blocked or challenged.

Countries you never want sign-ins from​

If you want to block a country for everyone, add it to Blocked Countries instead. Blocked countries are checked before any policy.