IP restriction for Visual Studio Team Services which is connected to Azure Active Directory

Question

We've recently connected our Visual Studio Team Services account to Azure Active Directory. The problem is Team Services is available to our users from everywhere and anyone can login and download the full source code of a project.

Is there anyway so we can limit access Azure AD users login based on their IP address so this way we could protect our source repository?

In general how can we deny Azure AD login requests from the outside of our organisation?

Thanks

Answer 1

You can configure the IP address white-list from Azure side, refer to this link for details: Enhancing Azure MFA with Contextual IP Address Whitelisting