Office365 access for only a specific domain

[David Niemann]

Is it possible to only allow access in Office365 for a particular customer defined in the URL? For these two below there is an Email=UID@companyname.onmicrosoft.com and then Realm=companyname.onmicrosoft.com.  Can I create a custom URL match to just allow office365 when one of those two are in the URL?

Example:

Sep 23 14:27:49 <proxynameremoved> accesslogs_syslog: Info: 1443032869.038 1 <IPaddressremoved> TCP_DENIED_SSL/403 0 GET https://outlook.office365.com:443/owa/service.svc/s/GetPersonaPhoto?email=UID@CompanyName.onmicrosoft.com&UA=0&size=HR96x96 "UserRemoved" NONE/- - BLOCK_WEBCAT_12-ITOServiceDesk-ITODesktops-DefaultGroup-NONE-NONE-NONE <IW_pem,3.4,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,IW_pem,-,"-","-","Unknown","Unknown","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-"> -

Sep 23 14:28:23 <proxynameremoved> accesslogs_syslog: Info: 1443032902.170 5 <IPaddressremoved> TCP_DENIED_SSL/403 0 GET https://outlook.office365.com:443/ecp/UsersGroups/EditMailbox.aspx?exsvurl=1&mkt=en-US&Realm=CompanyName.onmicrosoft.com&id=1adbacf4-c753-478b-8292-395b5e93928b "<UIDremoved>" NONE/- - BLOCK_WEBCAT_12-ITOServiceDesk-ITODesktops-DefaultGroup-NONE-NONE-NONE <IW_pem,3.4,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,IW_pem,-,"-","-","Unknown","Unknown","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-"> -

[Enda McGahern]

Hi David,

Facing the same challenge where i want users to only be able to login to one Office365 domain to access one exchange mailbox, but not any other. 

Did you figure out a solution? 

Can it be done with a regular expression?

Cheers

Enda

[Handy Putra]

can you try to use below Regular expressions in the custom URL category to match the link:

\email=UID@CompanyName.onmicrosoft.com
\Realm=CompanyName.onmicrosoft.com

[David Niemann]

I'll try this.

[Enda McGahern]

Hi Handy,

There is a sequence of URL's to allow for this that seem to be as follows. 

https://login.microsoftonline.com (Used to sign in and link allowed via web category)

https://portal.office.com/Home (Office365 menu allowed via web category)

https://outlook.office.com/owa/?realm=mydomain.ie

(there is sometimes random data after the domain name.

Can you suggest regular expression for this URL

https://outlook.office.com/owa/?realm=mydomain.ie

When you click on an email to open in a new window, it appears to always use

https://outlook.office.com/owa/projection.aspx

Thank you.

Enda

[Handy Putra]

You can try to use regular expression of:

/*\?realm=mydomain.ie

you can change the "mydomain.ie" to your domain name.

You can allow access to that link(regex) and block the rest (for example)

hope this helps