How to use SonarCloud with Conditional Access enabled in Azure AD Part 2?

[wAuner]

Hi,

there is already a similar question [here[(How to use SonarCloud with Conditional Access enabled in Azure AD?), but I was told by support to open a new thread.

We’re using Conditional Access Policies (CAP) in Azure Devops to integrate our MFA protection, so there is no way to disable it. I don’t think we’re using any IP range based rules.

Is it possible to integrate sonarcloud anyway? It was my hope, that the CAP only pose a problem if access is only permitted from a specific IP range, such as the company network, because sonarcloud does not have static IP addresses that could be allowed.

[wAuner]

Is there no support staff that can answer this question? That’s very disappointing.

[Christophe_Havard]

Hi @wAuner ,

Is it possible to integrate sonarcloud anyway?

I don’t know if it’s possible to make CAP work with SonarCloud and cannot find anyone here that knows the answer. This is not a use case we have very often.
Please do not hesitate to update this thread if you find any solution with this, it might help others
Kind regards,
Christophe

[Colin]

Hey @wAuner

SonarCloud does now provide fixed public IP addresses for communication with DevOps platforms (like Azure DevOps)

Read more here:

Static IPs for outgoing calls to DevOps platforms

Hello SonarCloud users, In our continued effort to provide improved security and more controlled network access, we are adding support for static IPs for outgoing calls to supported DevOps platforms (GitHub, GitLab, Azure DevOps Services, and BitBucket Cloud). This will help organizations whitelist based on static IPs and add a layer of security to limit the traffic sources allowed to access their resources. The list of IP addresses is as follows (and documented here): 3.122.211…