asked on 3/28/2017

ADFS: How would one include over 600 IP addresses in a claim rule?

Is there an effective method for doing this with "http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-forwarded-client-ip"?

What would the best syntax be? I would like to wrap PowerShell around it so it will be repeatable should the list change by 20 or 30 IP addresses for example.

I have seen this syntax but am unsure which is "best"

c2:[Type == "http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-forwarded-client-ip",
Value =~ "^(bxxx.xxx.xxx.xxx|xxx.xxx.xxx.xxxb)"]

Open in new window

Thank you.

Powershell * Active Directory Federation Services (ADFS)Active Directory Microsoft 365

Last Comment

K B

5/1/2017

David Johnson, CD

3/29/2017

use regex rules in your adfs setings

Please see if this article applies https://blogs.technet.microsoft.com/askds/2012/06/26/an-adfs-claims-rules-adventure/

K B

3/29/2017

ASKER

I guess what I am asking is do you shove all 600 IP addresses in one claim rule?

Also is this something you have done before.

ASKER CERTIFIED SOLUTION

David Johnson, CD

3/29/2017

THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.

View this solution by signing up for a free trial.

Members can start a 7-Day free trial and enjoy unlimited access to the platform.

See Pricing Options

Start Free Trial

K B

3/29/2017

ASKER

these are 600 ips that are not contiguous .. also they may come and go as the locations close and open

K B

5/1/2017

ASKER

Would still like to hear if anyone has done this from a DB or a list that changes regularly.