Azure Compliance ControlsMicrosoft Entra ID
Microsoft Entra ID conditional access policies should have trusted locations configured
Microsoft Entra ID Conditional Access supports trusted named locations defined by public IP ranges. The Prowler check looks for at least one location marked trusted with IP CIDR ranges available for use in policy conditions.
What this control checks
At least one named location is marked trusted with IP CIDR ranges defined
Framework mappings
The clauses this control is mapped to in each framework.
- A.5.15 Access control
- 2 Risk management policy
- 3 Incident handling
- 6 Security in network and information systems acquisition, development and maintenance
- 11 Access control
- 6.2.1 Ensure that 'trusted locations' are defined
- 5.2.1 Ensure that 'trusted locations' are defined
- 5.2.2 Ensure that an exclusionary geographic Conditional Access policy is considered
RBI Cyber Security Framework for UCBs
- Annex I (7.2)
- PSS-12.02AC Within these partitions, the following operations by the cloud service provider are restricted to occur only within the geographical boundaries of the customer-selected partitions: - Privileged access to the production environment by the cloud service provider, including potential...
- PSS-12.03AC Monitoring of threat intelligence data, which excludes any cloud service customer data and Account data, and logging of required routing information such as IP addresses are not required to be geographically limited to a single partition.
- 1.2.1 Ensure Trusted Locations Are Defined
- 1.2.1 Ensure Trusted Locations Are Defined
- 1.2.1 Ensure Trusted Locations Are Defined
- 2.2.1 Ensure Trusted Locations Are Defined
- 164.312(d) Person or entity authentication
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
iam_conditional_access_trusted_location_configured - Powerpipe Control:
azure_compliance.control.iam_conditional_access_trusted_location_configured - Prowler Check:
entra_trusted_named_locations_exists
Last reviewed: 2026-10-13