Private Access sensor network requirements
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 0d9a5fa · +5 −2 lines · also on GitHub
⋯ 4 unchanged lines
55
ms.author: kenwith
66
manager: dougeby
77
ms.topic: how-to
8
−ms.date: 01/07/2025
8
+ms.date: 01/21/2026
99
ms.service: global-secure-access
1010
ms.subservice: entra-private-access
1111
ms.reviewer: shkhalid
⋯ 197 unchanged lines
209209
210210
- Client IP address
211211
- IP address ranges
212
−- On-premises User Principal Name (UPN) such as `username@domain`. UPN is supported with Private Access Sensor version 2.1.31 or higher and is case insensitive. Username, which is the first part of the UPN, is supported with the earlier sensor versions and can be added in the `localpolicy`file only. We highly recommend using the UPNs instead of usernames. UPNs for on-premises users that are synced to Entra can be added from Microsoft Entra Admin Center. UPNs for on-premises users that aren't synced can only be added to the `localpolicy` file.
212
+- On-premises User Principal Name (UPN) such as `username@domain`. UPN is supported with Private Access Sensor version 2.1.31 or higher and is case insensitive. Username, which is the first part of the UPN, is supported with the earlier sensor versions and can be added in the `localpolicy`file only. We highly recommend using the UPNs instead of usernames. UPNs for on-premises users can be added from Microsoft Entra admin center. These can be UPNs for on-premises users that are synced to Entra or local to Active Directory and not synced to Entra.
213
+
214
+> [!NOTE]
215
+> UPNs for on-premises users that aren't synced can only be added to the `localpolicy` file in Private Access Sensor versions earlier than 2.2.0.
213216
214217
You can configure multiple IP addresses, multiple IP ranges, or both for a single SPN. Similarly, you can exclude multiple usernames for an SPN.
215218
⋯ 58 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 03:01 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.