Access role - azure idp with mobile access application

[Gaurav_Pandya]

Hi,

We are using unified policy for mobile access VPN. We are restricting users with specific IPs by using mobile access native application.

Recently we implemented azure IDP and trying to use access role with azure IDP but policy installation failed and getting error "MAB applications and Access Roles with AzureAD entities cannot be used in the same rule". As per sk171557, we cannot do that.

My question is how I can restrict user with specific IPs by using mobile access application and access role (Azure IDP). Or is there any other way?

[PhoneBoy · Accepted solution]

Try using an inline layer.
The top-level rule would contain the MAB application (and IP restriction), the rule(s) in the inline layer would contain the Access Roles with a "drop all" as the cleanup rule for that layer.

[Gaurav_Pandya]

That worked.. Thanks