Skip to content

Commit bf2a8df

Browse files
Merge pull request #223341 from MicrosoftGuyJFlo/LocationUpdate0109
[Azure AD] Conditional Access - Location condition update from PM
2 parents e6275bb + 6c14b3a commit bf2a8df

File tree

1 file changed

+3
-6
lines changed

1 file changed

+3
-6
lines changed

articles/active-directory/conditional-access/location-condition.md

Lines changed: 3 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ services: active-directory
66
ms.service: active-directory
77
ms.subservice: conditional-access
88
ms.topic: conceptual
9-
ms.date: 08/15/2022
9+
ms.date: 01/09/2023
1010

1111
ms.author: joflore
1212
author: MicrosoftGuyJFlo
@@ -78,12 +78,9 @@ If you select **Determine location by IP address (IPv4 only)**, the system will
7878
7979
If you select **Determine location by GPS coordinates**, the user will need to have the Microsoft Authenticator app installed on their mobile device. Every hour, the system will contact the user’s Microsoft Authenticator app to collect the GPS location of the user’s mobile device.
8080

81-
The first time the user is required to share their location from the Microsoft Authenticator app, the user will receive a notification in the app. The user will need to open the app and grant location permissions.
81+
The first time the user is required to share their location from the Microsoft Authenticator app, the user will receive a notification in the app. The user will need to open the app and grant location permissions.
8282

83-
For the next 24 hours, if the user is still accessing the resource and granted the app permission to run in the background, the device's location is shared silently once per hour.
84-
85-
- After 24 hours, the user must open the app and approve the notification.
86-
- Users who have number matching or additional context enabled in the Microsoft Authenticator app won't receive notifications silently and must open the app to approve notifications.
83+
Every hour the user is accessing resources covered by the policy they will need to approve a push notification from the app.
8784

8885
Every time the user shares their GPS location, the app does jailbreak detection (Using the same logic as the Intune MAM SDK). If the device is jailbroken, the location isn't considered valid, and the user isn't granted access.
8986

0 commit comments

Comments
 (0)