Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

AADConditionalAccessPolicy: Export-M365DSCConfiguration fails with named location #2974

Closed
cstaubli opened this issue Mar 7, 2023 · 1 comment · Fixed by #3002, #3014 or #3209
Closed
Labels
Bug Something isn't working Entra ID

Comments

@cstaubli
Copy link

cstaubli commented Mar 7, 2023

Details of the scenario you tried and the problem that is occurring

During export with Export-M365DSCConfiguration an error occurs when a conditional access policy is configured with location named "Multifactor authentication trusted IPs". This is not a user defined location, rather a "system" one.

Verbose logs showing the problem

"Couldn't find Location 00000000-0000-0000-0000-000000000000 , couldn't add to policy [name-of-conditional-access-policy]"
TenantId: [id-of-tenant]

Suggested solution to the issue

Don't try to get named location with ID 00000000-0000-0000-0000-000000000000, just declare it as "Multifactor authentication trusted IPs"

The DSC configuration that is used to reproduce the issue (as detailed as possible)

n/a

The operating system the target node is running

n/a

Version of the DSC module that was used ('dev' if using current dev branch)

1.23.301.1

@andikrueger andikrueger added Bug Something isn't working Entra ID labels Mar 7, 2023
sandrola added a commit to swisscom/Microsoft365DSC that referenced this issue Mar 8, 2023
…icrosoft#2965

Fix AADConditionalAccessPolicy: Export-M365DSCConfiguration fails with named location microsoft#2974
@GruberMarkus
Copy link
Contributor

This issue is still relevant for release 1.23.412.

I get the exact same error message for two conditional access policies. Both are configured to include all locations and to exclude "Multifactor authentication trusted IPs".

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment