Context: Our application hosts its processing server in Germany (EU). Your current Conditional Access policies restrict access to France only. To allow our application to sync data while maintaining your security posture, please add our backend IP address as a Named Location.

Our Backend IP:

• 74.220.51.0/24
• 74.220.59.0/24
• If using the Allia Windows Agent Sync for DSM, it’s necessary to add TCP outbound port 7233

Steps to Configure in Microsoft Entra ID (Azure AD):

1. Create the Named Location:
   • Go to Microsoft Entra admin center > Protection > Conditional Access > Named locations.
   • Click + IP ranges location.
   • Name: Allia platform
   • IP ranges: Enter our IP address: 74.220.51.0/24, 74.220.59.0/24
   • Click Create.
2. Update the Blocking Policy:
   • Go to Conditional Access > Policies.
   • Find the policy that restricts access by location (often named "Block Non-France" or "Geo-Blocking").
   • Click on the policy to edit it.
   • Under Conditions > Locations:
     • Go to the Exclude tab.
     • Select Selected locations.
     • Choose the location you just created (Allia platform).
     • Click Select.
   • Save the policy.

Note: If you have specific policies targeting Service Principals (Workload Identities), please repeat step 2 for those policies to ensure our application's identity is not blocked.