starred/CIPP

Fork 0

mirror of https://github.com/KelvinTegelaar/CIPP.git synced 2026-04-25 08:16:01 +03:00

[GH-ISSUE #2236] [Feature Request]: Conditional Access #1154

New issue

Closed

opened 2026-03-02 13:42:00 +03:00 by kerem · 4 comments

kerem commented

2026-03-02 13:42:00 +03:00

Owner

Originally created by @Link-itSupport on GitHub (Mar 20, 2024).
Original GitHub issue: https://github.com/KelvinTegelaar/CIPP/issues/2236

Description of the new feature - must be an in-depth explanation of the feature you want, reasoning why, and the added benefits for MSPs as a whole.

Hi Kelvin and John,

I have a few suggestions that would be very handy in the CIPP CA settings:

Making CA with interface
When creating a CA policy via CIPP now, you have the option to enable, disable, or set it to report only. We would like to provide more options when rolling out CA policy from CIPP. This includes being able to select groups fetched from the tenant via CIPP when creating a CA policy. Additionally, if possible, pre-adding a trusted location specific to that customer would be beneficial. Much can already be done when working with the JSON of your CA policy template, but this isn't accessible to everyone in our company.
Temporarily CA
You can temporarily create a conditional access policy that is automatically removed later.

This would be useful if someone needs to be available abroad. Otherwise, a separate CA policy would have to be set up so that he can still log in. People can forget to disable the temporary policy, so it gets messy and can make mistakes.

An interface I can see before me is actually just like Vacation Mode, so you select a line and after DATE-TIME run the following command: Remove-AzureADMSConditionalAccessPolicy Selected policy name

A github page what may help is for powershell commands: https://github.com/Azure-Samples/azure-ad-conditional-access-apis/blob/main/01-configure/powershell/readme.md

Thanks!

PowerShell commands you would normally use to achieve above request

Remove-AzureADMSConditionalAccessPolicy Selected policy name

Originally created by @Link-itSupport on GitHub (Mar 20, 2024). Original GitHub issue: https://github.com/KelvinTegelaar/CIPP/issues/2236 ### Description of the new feature - must be an in-depth explanation of the feature you want, reasoning why, and the added benefits for MSPs as a whole. Hi Kelvin and John, I have a few suggestions that would be very handy in the CIPP CA settings: - Making CA with interface When creating a CA policy via CIPP now, you have the option to enable, disable, or set it to report only. We would like to provide more options when rolling out CA policy from CIPP. This includes being able to select groups fetched from the tenant via CIPP when creating a CA policy. Additionally, if possible, pre-adding a trusted location specific to that customer would be beneficial. Much can already be done when working with the JSON of your CA policy template, but this isn't accessible to everyone in our company. - Temporarily CA You can temporarily create a conditional access policy that is automatically removed later. This would be useful if someone needs to be available abroad. Otherwise, a separate CA policy would have to be set up so that he can still log in. People can forget to disable the temporary policy, so it gets messy and can make mistakes. An interface I can see before me is actually just like Vacation Mode, so you select a line and after *DATE*-*TIME* run the following command: Remove-AzureADMSConditionalAccessPolicy *Selected policy name* A github page what may help is for powershell commands: https://github.com/Azure-Samples/azure-ad-conditional-access-apis/blob/main/01-configure/powershell/readme.md Thanks! ### PowerShell commands you would normally use to achieve above request Remove-AzureADMSConditionalAccessPolicy *Selected policy name*

kerem

2026-03-02 13:42:00 +03:00

closed this issue
added the
enhancement

no-priority

no-activity
labels

kerem commented

2026-03-02 13:42:01 +03:00

Author

Owner

@KelvinTegelaar commented on GitHub (Mar 27, 2024):

for #2 we already have a solution; Vacation mode is made for just that.

@KelvinTegelaar commented on GitHub (Mar 27, 2024): for #2 we already have a solution; Vacation mode is made for just that.

kerem commented

2026-03-02 13:42:01 +03:00

Author

Owner

@Link-itSupport commented on GitHub (Mar 28, 2024):

Hi Kelvin,

By number 2, we actually mean that we roll out a CA and with an end date in it.
After that end date, this CA is automatically removed again.
The vacation mode only ensures that a user is 'excluded', but if this user goes abroad but still wants temporary access from abroad.

Of course, you don't want to open up this country to everyone, so by creating a temporary rule, we make sure it is only accessible to that user.

At number 1, is this something that is going to be included in the roadmap?

@Link-itSupport commented on GitHub (Mar 28, 2024): Hi Kelvin, By number 2, we actually mean that we roll out a CA and with an end date in it. After that end date, this CA is automatically removed again. The vacation mode only ensures that a user is 'excluded', but if this user goes abroad but still wants temporary access from abroad. Of course, you don't want to open up this country to everyone, so by creating a temporary rule, we make sure it is only accessible to that user. At number 1, is this something that is going to be included in the roadmap?

kerem commented

2026-03-02 13:42:02 +03:00

Author

Owner

@github-actions[bot] commented on GitHub (Apr 7, 2024):

This issue is stale because it has been open 10 days with no activity. We will close this issue soon. If you want this feature implemented you can contribute it. See: https://docs.cipp.app/dev-documentation/contributing-to-the-code . Please notify the team if you are working on this yourself.

@github-actions[bot] commented on GitHub (Apr 7, 2024): This issue is stale because it has been open 10 days with no activity. We will close this issue soon. If you want this feature implemented you can contribute it. See: https://docs.cipp.app/dev-documentation/contributing-to-the-code . Please notify the team if you are working on this yourself.

kerem commented

2026-03-02 13:42:02 +03:00

Author

Owner

@Link-itSupport commented on GitHub (Apr 11, 2024):

Hi Kelvin,

Could you please give us an update about this feature request?

@Link-itSupport commented on GitHub (Apr 11, 2024): Hi Kelvin, Could you please give us an update about this feature request?

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/CIPP#1154

No description provided.

Rows
Columns