topic Access role - azure idp with mobile access application in SASE and Remote Access

Access role - azure idp with mobile access application

Gaurav_Pandya — Tue, 15 Nov 2022 16:40:54 GMT

Hi,

We are using unified policy for mobile access VPN. We are restricting users with specific IPs by using mobile access native application.

Recently we implemented azure IDP and trying to use access role with azure IDP but policy installation failed and getting error "MAB applications and Access Roles with AzureAD entities cannot be used in the same rule". As per sk171557, we cannot do that.

My question is how I can restrict user with specific IPs by using mobile access application and access role (Azure IDP). Or is there any other way?

Re: Access role - azure idp with mobile access application

PhoneBoy — Tue, 22 Nov 2022 20:22:43 GMT

Try using an inline layer.
The top-level rule would contain the MAB application (and IP restriction), the rule(s) in the inline layer would contain the Access Roles with a "drop all" as the cleanup rule for that layer.

Re: Access role - azure idp with mobile access application

Gaurav_Pandya — Mon, 23 Jan 2023 11:25:00 GMT

That worked.. Thanks