Skip to content
Entra Source IP Anchoring with Global Secure Access to Improve the Security Management of SaaS Apps

Entra Source IP Anchoring with Global Secure Access to Improve the Security Management of SaaS Apps

Written By Anoop C Nair
Last Updated July 15, 2026
Posted In Entra
SHARE

Today, we are discussing Entra Source IP anchoring with Global Secure Access. As you all know, many organizations have used SaaS or the Line of Business to allow access from specific trusted locations. Source IP Anchoring is an essential feature for organizations using Global Secure Access.

With global secure access, it provides the best security features and improves user experience by keeping the source IP address. Although this may be challenging sometimes, the results are very effective for organizations. The user IP address must be safe with the Source IP Anchoring with Global Secure Access.

When traffic goes through a cloud-based security service, users needn’t worry. We all know how vital an IP address is for a user. The IP address helps the device communicate with the network, leading to the data going to the correct location.

As you know, security is an essential part of an organization. Using source IP Anchoring with Entra Global Secure Access is the best way to improve the security management of SaaS or the Line of Business. This post can look at a small overview of Source IP Anchoring with Global Secure Access.

Patch My PC

What is an IP Address?

The IP address refers to an Internet Protocol address. This address is very important for a device and its network connection. It is critical for leading data to the correct location.

Entra Source IP Anchoring with Global Secure Access to Improve the Security Management of SaaS Apps

Above, we discussed an overall view of the Source IP anchoring with Global Secure Access. To make an application only accessible through a specific network, you can set it up with Microsoft Entra Private Access. This is useful when an application allows access with local credentials not linked to your identity provider.

  • The application only allows connections from the IP address 15.4.23.54
  • If a user tries to access the app, the global secure access finds the traffic.
  • The traffic tunnels to the on-premises network using the Private Network Connector.
  • The traffic uses the internet to reach out to the web application
  • The application sees the connection originating from 15.4.23.54 and allows access.
Entra Source IP Anchoring with Global Secure Access to Improve the Security Management of SaaS Apps-Fig.1
Entra Source IP Anchoring with Global Secure Access to Improve the Security Management of SaaS Apps-Fig.1

How to Configure Source IP Anchoring

This is an easy step for organizations(users). First, you must log in to the Microsoft Entra admin center. In Entra, go to the Global secure access option; under Global secure access, you can select the Enterprise application option.

Click on the New Application Option. After that, you can name the application and select the Connector Group that acquires and routes the traffic.

  • Select Add application segment.
Entra Source IP Anchoring with Global Secure Access to Improve the Security Management of SaaS Apps-Fig.2
Entra Source IP Anchoring with Global Secure Access to Improve the Security Management of SaaS Apps-Fig.2

In the application segment, fill in the Destination type, Fully qualified domain name, ports, protocol and status options and click on apply. To assign users and groups to the application, navigate back to Enterprise applications and select the application you created.

  • Then, select Users and Groups and Add a user/group.
  • Select Users and GroupsNone Selected.
  • Select the users and groups you want to assign to this application. Select Select.
  • Finally, click on the Assign
Application Segment OptionsInfo
Destination type,Select a Fully qualified domain name.
Fully qualified domain name Enter the fully qualified domain name of the web application
Ports If the application uses HTTP, enter 80. If the application uses HTTPS, enter 443. You might also enter both ports
Protocol Select TCP.
Entra Source IP Anchoring with Global Secure Access to Improve the Security Management of SaaS Apps-Table.1
Source IP Anchoring with Global Secure Access to Improve the Security Management of SaaS or the Line of Business-Fig.3
Entra Source IP Anchoring with Global Secure Access to Improve the Security Management of SaaS Apps-Fig.3

Need Further Assistance or Have Technical Questions?

Join the LinkedIn Page and Telegram group to get the latest step-by-step guides and news updates. Join our Meetup Page to participate in User group meetings. Also, Join the WhatsApp Community to get the latest news on Microsoft Technologies. We are there on Reddit as well.

Anoop C Nair has been Microsoft MVP from 2015 onwards for ten consecutive years! He is a Workplace Solution Architect with more than 22+ years of experience in Workplace technologies. He is also a Blogger, Speaker, and Local User Group Community leader. His primary focus is on Device Management technologies like SCCM and Intune. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security, Career, etc.

Written by

Anoop C Nair is Workplace Technology solution architect with 25+ years of experience in global enterprise organizations such as JP Morgan, Capgemini, etc. Microsoft Certified Trainer. Microsoft MVP from 2015 onwards for consecutive 11+ years! He also conducts Intune and modern workplace tech training for enterprise organizations. He is Blogger, Speaker, and Founder of HTMD Community and HTMD Conference. His main focus is on Device Management technologies like Intune, Windows, Cloud PC. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security.

Discussion

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

Entra

Entra ID SSPR Improves Security with Registered Authentication Methods | Impact on Unregistered Users Starting September 2026

Key Takeaway Entra ID SSPR Improves Security with Registered Authentication Methods! Starting September 7, 2026, Microsoft Entra ID Self-Service Password Reset (SSPR) will require users to verify their identity using explicitly registered authentication methods. Directory-sourced contact information, such as mobile phone numbers, business phone numbers, and alternate email addresses, will no longer be accepted for […]

AC Anoop C Nair 4 min read
Entra

Explicit Forward Proxy in Microsoft Entra Internet Access Helps Secure VDI BYOD and Clientless Browsing

Key Takeaways Explicit Forward Proxy in Microsoft Entra Internet Access! This feature allows organizations to use secure web and AI gateway capabilities without deploying the Global Secure Access client, making it useful for browser-based and lightly managed environments. It works with browsers that support Proxy Auto-Configuration (PAC) files. Since this is a prerelease feature, Microsoft […]

AC Anoop C Nair 3 min read
Cloud

Microsoft Enables Entra Writeback for Cloud-Managed Remote Mailboxes to Help Remove Last Exchange Server

Key Takeaways: Let’s discuss about Microsoft Unlocks Entra Writeback for Cloud-Managed Remote Mailboxes to Help Remove Last Exchange Server. For customers with no remaining dependency on their last Exchange Server, a guide for decommissioning your last Exchange Server. Microsoft announced the Public Preview of Cloud-Managed Remote Mailboxes. Microsoft is excited to share these two new milestones […]

AC Anoop C Nair 3 min read