PROCEDURE KP Environmental has established a conditional access policy blocking logins from all countries outside the United States. This is meant to reduce the threat of unauthorized access to accounts and works in conjunction with the MFA Policy.

REQUIREMENTS

• Request comes from Client POC(s) or Company Owner Kenda Pollio

• If an end user calls in saying that they are not able to access M365, and they are traveling outside the United States, please obtain approval from Rebecca Castelloe or Jessica Walker prior to removing them from Conditional Access Policy (CAP)

• 1Password > KP Environmental > Websites > M365 Admin Account

STEPS

1. Login to the Client’s AzureAD (MS Entra Admin Center)
2. Under Protect & Secure, select Conditional Access
3. Click on “All users included and specific users excluded”
4. Cick on the Exclude Section
5. Click on link provided under “Select excluded users and groups”
7. Type the name or UPN of the User to be excluded
8. Select the user to be excluded
9. Click Select
11. Verify user is on the excluded list
13. Please follow up with the requester on when the employee will be returning to the United States, and schedule the removal of the CAP exemption.

REFERENCES

NA