{"id":783,"date":"2023-03-22T05:01:54","date_gmt":"2023-03-21T20:01:54","guid":{"rendered":"https:\/\/m365jp.xyz\/?p=783"},"modified":"2023-03-22T05:13:43","modified_gmt":"2023-03-21T20:13:43","slug":"mc498471-updated-ipv6-coming-to-azure-ad-2","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2023-03-22-mc498471-updated-ipv6-coming-to-azure-ad-2","title":{"rendered":"MC498471 | (Updated) IPv6 coming to Azure AD"},"content":{"rendered":"
\n
\n
\n\n\n\n
MC498471 | (Updated) IPv6 coming to Azure AD<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n
\n\n\n\n\n\n\n\n\n\n
Classification<\/th>\nplanForChange<\/td>\n<\/tr>\n
Last Updated<\/th>\n03\/21\/2023 19:01:11<\/td>\n<\/tr>\n
Start Time<\/th>\n01\/17\/2023 19:31:15<\/td>\n<\/tr>\n
End Time<\/th>\n06\/30\/2023 07:00:00<\/td>\n<\/tr>\n
Action Required By Date<\/th>\n2023-03-30T07:00:00Z<\/td>\n<\/tr>\n
Message Content<\/th>\n\n

Updated March 21, 2023: Earlier, we had announced<\/a> our plan to bring IPv6 support to Microsoft Azure Active Directory (Azure AD) enabling our customers to reach the Azure AD services over IPv4, IPv6 or dual stack endpoints. This is just a reminder that we\u2019ll begin introducing IPv6 support into Azure AD services in a phased approach, starting March 31st, 2023. <\/p>\n

If your networks don\u2019t support IPv6, you don\u2019t need to take any action to change your configurations or policies. For most customers, IPv4 won’t completely disappear from their digital landscape, so we aren’t planning to require IPv6 or to de-prioritize IPv4 in any Azure AD features or services. We will continue to share additional guidance on IPv6 enablement in Azure AD at this easy to remember link https:\/\/aka.ms\/azureadipv6<\/a>.<\/p>\n

With the growing adoption and support of IPv6 across enterprise networks, service providers, and devices, many customers are wondering if their users can continue to access their services and applications from IPv6 clients and IPv6 networks. <\/p>\n

Today, we\u2019re excited to announce our plan to bring IPv6 support to Microsoft Azure Active Directory (Azure AD). This will allow customers to reach the Azure AD services over both IPv4 and IPv6 network protocols (dual stack). <\/p>\n

For most customers, IPv4 won’t completely disappear from their digital landscape, so we aren’t planning to require IPv6 or to de-prioritize IPv4 in any Azure Active Directory features or services. <\/p>\n

[When this will happen:]<\/p>\n

We\u2019ve been gradually rolling out IPv6 for some of our services for a while. Starting in late March 2023 we’ll begin enabling IPv6 for Azure AD authentication. We will introduce IPv6 support into Azure AD authentication in a phased approach, beginning late March 2023.<\/p>\n

[What you can do to prepare:]<\/p>\n

We have guidance below which is specifically for Azure AD customers, who use IPv6 addresses and also<\/b> use Named Locations in their Conditional Access policies. <\/p>\n

If you have public IPv6 addresses representing your network, take the actions that are described in the following sections as soon as possible.<\/p>\n

Customers who use named locations<\/a> to identify specific network boundaries in their organization, need to: <\/p>\n

    \n
  1. Conduct an audit of existing named locations to anticipate potential impact; <\/li>\n
  2. Work with your network partner to identify egress IPv6 addresses in use in your environment.; <\/li>\n
  3. Review and update existing named locations<\/a> to include the identified IPv6 ranges. <\/li>\n<\/ol>\n

    Customers who use Conditional Access location based policies<\/a>, to restrict and secure access to their apps from specific networks, need to: <\/p>\n

      \n
    1. Conduct an audit of existing Conditional Access policies to identify use of named locations<\/a> as a condition to anticipate potential impact; <\/li>\n
    2. Review and update existing Conditional Access location based policies<\/a> to ensure they continue to meet your organization\u2019s security requirements. <\/li>\n<\/ol>\n

      Failing to follow these steps might result in the following impact: <\/p>\n

      <\/p>\n

        \n
      1. Users of IPv6 addresses may be blocked, depending on your organization’s Conditional Access policies and Identity Protection configurations. <\/li>\n
      2. False positive detections due to ‘Mark as trust location’ not being checked for your internal networks and VPN\u2019s can result in users being marked as risky.<\/li>\n<\/ol>\n

         We will continue to share additional guidance on IPv6 enablement in Azure AD here: IPv6 Support in Azure Active Directory<\/a>. <\/p>\n

        Learn more about Microsoft identity:<\/p>\n

Machine Translation<\/th>\n\n

2023 \u5e74 3 \u6708 21 \u65e5\u66f4\u65b0: \u4ee5\u524d\u3001Microsoft Azure Active Directory (Azure AD) \u306b IPv6 \u30b5\u30dd`\u30c8\u3092\u6bea\u8d30\u304c IPv4\u3001IPv6\u3001\u307e\u305f\u306f\u30c7\u30e5\u30a2\u30eb \u30b9\u30bf\u30c3\u30af \u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8U\u7531\u3067 Azure AD \u30b5`\u30d3\u30b9\u306b\u30a2\u30af\u30bb\u30b9\u3067\u304d\u308b\u3088\u3046\u306b\u3059\u308b\u753b \u3092k\u8868\u3057\u307e\u3057\u305f<\/a> \u3002\u3053\u308c\u306f\u30012023 \u5e74 3 \u6708 31 \u65e5\u304b\u3089\u6bb5A\u7684\u306b Azure AD \u30b5`\u30d3\u30b9\u3078\u306e IPv6 \u30b5\u30dd`\u30c8\u306e\u6bea\u8737_\u59cb\u3059\u308b\u3053\u3068\u3092\u601d\u3044\u51fa\u3055\u305b\u308b\u3082\u306e\u3067\u3059\u3002<\/p>\n

\u30cd\u30c3\u30c8\u30ef`\u30af\u304c IPv6 \u3092\u30b5\u30dd`\u30c8\u3057\u3066\u3044\u306a\u3044\u9f8a\u6089\u7a00\u2483O\u5b9a\u3084\u30dd\u30ea\u30b7`\u3092\u6d93\u5de5\u6bea\u90e1\u5e5b\u8fdd\u4f10\u7ec1\u87adg\u884c\u3059\u308b\u5fc5\u8981\u306f\u3042\u308a\u307e\u305b\u3093\u3002\u307b\u3068\u3093\u3069\u306e\u304a\u5ba2\u306b\u3068\u3063\u3066\u3001IPv4 \u304c\u30c7\u30b8\u30bf\u30eb \u30e9\u30f3\u30c9\u30b9\u30b1`\u30d7\u304b\u3089\u5b8c\u5168\u306b\u6d88\u3048\u308b\u308f\u3051\u3067\u306f\u306a\u3044\u305f\u3081\u3001Azure AD \u306eC\u80fd\u3084\u30b5`\u30d3\u30b9\u3067 IPv6 \u3092\u8981\u6c42\u3057\u305f\u308a\u3001IPv4 \u306e\u5148\u4f4d\u3092\u4e0b\u3052\u305f\u308a\u3059\u308b\u3053\u3068\u306f\u753b\u3057\u3066\u3044\u307e\u305b\u3093\u3002Azure AD \u3067\u306e IPv6 \u306e\u6709\u7095\u788ev\u3059\u308b\u8ffd\u52a0\u306e\u30ac\u30a4\u30c0\u30f3\u30b9\u306b\u3064\u3044\u3066\u306f\u3001\u3053\u306e\u3048\u3084\u3059\u3044\u30ea\u30f3\u30af https:\/\/aka.ms\/azureadipv6<\/a> \u3067\u5f15\u304dA\u304d\u5171\u6709\u3057\u307e\u3059\u3002<\/p>\n

\u30a8\u30f3\u30bf`\u30d7\u30e9\u30a4\u30ba \u30cd\u30c3\u30c8\u30ef`\u30af\u3001\u30b5`\u30d3\u30b9 \u30d7\u30ed\u30d0\u30a4\u30c0`\u3001\u304a\u3088\u3073\u30c7\u30d0\u30a4\u30b9\u5168\u4f53\u3067 IPv6 \u306e\u88fc\u76f2\u53bb\u5355\u8378`\u30c8\u304cM\u3080\u4e2d\u3001\u591a\u304f\u306e\u304a\u5ba2\u306f\u3001\u30e6`\u30b6`\u304c IPv6 \u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u304a\u3088\u3073 IPv6 \u30cd\u30c3\u30c8\u30ef`\u30af\u304b\u3089\u30b5`\u30d3\u30b9\u3084\u30a2\u30d7\u30ea\u30b1`\u30b7\u30e7\u30f3\u306b\u5f15\u304dA\u304d\u30a2\u30af\u30bb\u30b9\u3067\u304d\u308b\u304b\u3069\u3046\u304b\u7591\u306b\u601d\u3063\u3066\u3044\u307e\u3059\u3002 <\/p>\n

\u672c\u65e5\u3001Microsoft Azure Active Directory (Azure AD) \u306b IPv6 \u30b5\u30dd`\u30c8\u3092\u6bea\u5de5\u80d7\u753b\u3092k\u8868\u3067\u304d\u308b\u3053\u3068\u3092\u5b09\u3057\u304f\u601d\u3044\u307e\u3059\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u304a\u5ba2\u306f IPv4 \u3068 IPv6 \u306eI\u65b9\u306e\u30cd\u30c3\u30c8\u30ef`\u30af \u30d7\u30ed\u30c8\u30b3\u30eb (\u30c7\u30e5\u30a2\u30eb \u30b9\u30bf\u30c3\u30af) \u3092\u4ecb\u3057\u3066 Azure AD \u30b5`\u30d3\u30b9\u306b\u5230_\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n

\u307b\u3068\u3093\u3069\u306e\u304a\u5ba2\u306b\u3068\u3063\u3066\u3001IPv4 \u304c\u30c7\u30b8\u30bf\u30ebh\u5883\u304b\u3089\u5b8c\u5168\u306b\u6d88\u3048\u308b\u308f\u3051\u3067\u306f\u306a\u3044\u305f\u3081\u3001Azure Active Directory \u306eC\u80fd\u3084\u30b5`\u30d3\u30b9\u3067 IPv6 \u3092\u8981\u6c42\u3057\u305f\u308a\u3001IPv4 \u306e\u5148\u4f4d\u3092\u4e0b\u3052\u305f\u308a\u3059\u308b\u3053\u3068\u306f\u753b\u3055\u308c\u3066\u3044\u307e\u305b\u3093\u3002<\/p>\n

[\u3053\u308c\u304c\u8d77\u3053\u308b\u3068\u304d:]<\/p>\n

\u3057\u3070\u3089\u304f\u306eg\u3001\u4e00\u90e8\u306e\u30b5`\u30d3\u30b9\u3067IPv6\u3092\u5f90\u3005\u306b\u5c55_\u3057\u3066\u304d\u307e\u3057\u305f\u30022023 \u5e74 3 \u6708\u4e0b\u65ec\u304b\u3089\u3001Azure AD J^\u306e IPv6 \u306e\u6709\u7095\u8737_\u59cb\u3057\u307e\u3059\u30022023 \u5e74 3 \u6708\u4e0b\u65ec\u304b\u3089\u3001\u6bb5A\u7684\u306b Azure AD J^\u306b IPv6 \u30b5\u30dd`\u30c8\u3092\u6bea\u7b4f\u84fc\u57c2<\/p>\n

\u3010\u6d43\u6266\u6bea\u957f:\u3011<\/p>\n

\u4ee5\u4e0b\u306b\u3001IPv6 \u30a2\u30c9\u30ec\u30b9\u3092\u4f7f\u7528\u3057\u3001\u6761\u4ef6\u4ed8\u304d\u30a2\u30af\u30bb\u30b9 \u30dd\u30ea\u30b7`\u3067\u30cd`\u30e0\u30c9 \u30ed\u30b1`\u30b7\u30e7\u30f3 \u3082<\/b> \u4f7f\u7528\u3059\u308b Azure AD \u306e\u304a\u5ba2\u5411\u3051\u306e\u30ac\u30a4\u30c0\u30f3\u30b9\u3092\u793a\u3057\u307e\u3059\u3002 <\/p>\n

\u30cd\u30c3\u30c8\u30ef`\u30af\u3092\u8868\u3059\u30d1\u30d6\u30ea\u30c3\u30af IPv6 \u30a2\u30c9\u30ec\u30b9\u304c\u3042\u308b\u9f8a\u6089\u7a00\u248b\u97e6\u8fdd\u4e92\u4f10\u7ec1\u87ad\u94a6h\u660e\u3059\u308b\u30a2\u30af\u30b7\u30e7\u30f3\u3092\u3067\u304d\u308b\u3060\u3051\u65e9\u304fg\u884c\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n

\u30cd`\u30e0\u30c9 \u30ed\u30b1`\u30b7\u30e7\u30f3<\/a>\u3092\u4f7f\u7528\u3057\u3066M\u5185\u306e\u7279\u5b9a\u306e\u30cd\u30c3\u30c8\u30ef`\u30af\u5883\u754c\u3092Re\u3059\u308b\u304a\u5ba2\u306f\u3001\u6b21\u306e\u3053\u3068\u3092\u884c\u3046\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n

    \n
  1. \u65e2\u5b58\u306e\u30cd`\u30e0\u30c9 \u30ed\u30b1`\u30b7\u30e7\u30f3\u306eO\u6454g\u65bd\u3057\u3066\u3001\u6f5c\u5728\u7684\u306a\u5f71\u3092\u4e88y\u3057\u307e\u3059\u3002<\/li>\n
  2. \u30cd\u30c3\u30c8\u30ef`\u30af \u30d1`\u30c8\u30ca`\u3068f\u529b\u3057\u3066\u3001h\u5883\u3067\u4f7f\u7528\u3055\u308c\u3066\u3044\u308b\u30a8\u30b0\u30ec\u30b9 IPv6 \u30a2\u30c9\u30ec\u30b9\u3092\u7279\u5b9a\u3057\u307e\u3059\u3002<\/li>\n
  3. \u65e2\u5b58\u306e \u30cd`\u30e0\u30c9 \u30ed\u30b1`\u30b7\u30e7\u30f3<\/a> \u3092_J\u3057\u3066\u66f4\u65b0\u3057\u3001Re\u3055\u308c\u305f IPv6 \u6b37\u869d\u5e5b\u84fc\u57c2<\/li>\n<\/ol>\n

    \u6761\u4ef6\u4ed8\u304d\u30a2\u30af\u30bb\u30b9\u306e\u93ca\u4f83`\u30b9\u306e\u30dd\u30ea\u30b7`<\/a>\u3092\u4f7f\u7528\u3057\u3066\u3001\u7279\u5b9a\u306e\u30cd\u30c3\u30c8\u30ef`\u30af\u304b\u3089\u30a2\u30d7\u30ea\u3078\u306e\u30a2\u30af\u30bb\u30b9\u3092\u5236\u9650\u3057\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3067\u4fddo\u3059\u308b\u304a\u5ba2\u306f\u3001\u6b21\u306e\u3053\u3068\u3092\u884c\u3046\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n

      \n
    1. \u65e2\u5b58\u306e\u6761\u4ef6\u4ed8\u304d\u30a2\u30af\u30bb\u30b9 \u30dd\u30ea\u30b7`\u306eO\u6454g\u65bd\u3057\u3066\u3001\u6f5c\u5728\u7684\u306a\u5f71\u3092\u4e88y\u3059\u308b\u6761\u4ef6\u3068\u3057\u3066 \u30cd`\u30e0\u30c9 \u30ed\u30b1`\u30b7\u30e7\u30f3<\/a> \u306e\u4f7f\u7528\u3092\u7279\u5b9a\u3057\u307e\u3059\u3002<\/li>\n
    2. \u65e2\u5b58\u306e \u6761\u4ef6\u4ed8\u304d\u30a2\u30af\u30bb\u30b9\u306e\u93ca\u4f83`\u30b9\u306e\u30dd\u30ea\u30b7`<\/a> \u3092_J\u3057\u3066\u66f4\u65b0\u3057\u3001M\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8981\u4ef6\u3092\u5f15\u304dA\u304d\u6c26\u90e1\u7b4f\u76ae\u3044\u6bea\u957f\u8da3\u867c_J\u3057\u307e\u3059\u3002<\/li>\n<\/ol>\n

      \u3053\u308c\u3089\u306e\u624b\u3092g\u884c\u3057\u306a\u3044\u3068\u3001\u6b21\u306e\u3088\u3046\u306a\u5f71\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n

      <\/p>\n

        \n
      1. IPv6 \u30a2\u30c9\u30ec\u30b9\u306e\u30e6`\u30b6`\u306f\u3001M\u306e\u6761\u4ef6\u4ed8\u304d\u30a2\u30af\u30bb\u30b9 \u30dd\u30ea\u30b7`\u3068 ID \u4fddo\u306e\u6210\u306b\u3088\u3063\u3066\u306f\u30d6\u30ed\u30c3\u30af\u3055\u308c\u308b\u9f8a\u6089\u8f98\u84fc\u57c2 <\/li>\n
      2. \u5185\u90e8\u30cd\u30c3\u30c8\u30ef`\u30af\u3068VPN\u306e\u300c\u4fe1m\u3067\u304d\u308b\u93ca\u8da3\u7b4f\u5339\u855e`\u30af\u300d\u304c\u30c1\u30a7\u30c3\u30af\u3055\u308c\u3066\u3044\u306a\u3044\u3053\u3068\u306b\u3088\u308b`\u624b\u6454\u745c\u8f8d\u59d7`\u30b6`\u304c\u5371\u3068\u3057\u3066\u30de`\u30af\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/li>\n<\/ol>\n

         Azure AD \u3067\u306e IPv6 \u306e\u6709\u7095\u788ev\u3059\u308b\u8ffd\u52a0\u306e\u30ac\u30a4\u30c0\u30f3\u30b9\u306b\u3064\u3044\u3066\u306f\u3001\u300cAzure Active Directory \u3067\u306e IPv6 \u306e\u30b5\u30dd`\u30c8<\/a>\u300d\u3067\u5f15\u304dA\u304d\u5171\u6709\u3057\u307e\u3059\u3002 <\/p>\n

        \u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8\u306e\u30a2\u30a4\u30c7\u30f3\u30c6\u30a3\u30c6\u30a3\u306e\u306b\u3064\u3044\u3066\u306f\u3001\u4ee5\u4e0b\u3092\u53c2\u7167\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n