Conditional Access Problems

Fix Microsoft 365 Sign-In Fails Without VPN When Traveling Abroad

Maira Mehtab Sep 21, 2026 868 views

Question details

The user is unable to sign into Microsoft 365 applications like Teams and OneDrive while traveling internationally unless they are connected to the company VPN.

Product: Microsoft 365
Device & OS: Mac and mobile devices
Scenario: Attempting to access company cloud resources while traveling in Italy (or another foreign country) without a VPN connection.
Observed behavior: Sign-in completely fails on local networks but succeeds when network traffic is routed through the company VPN.

Before you start

Ensure you have a stable internet connection and can successfully connect to your company VPN as an immediate, temporary workaround while you contact your IT administrator.

Solution 1Recommended

Review Microsoft Entra Conditional Access Policies

IT administrators must check for location-based conditional access restrictions that intentionally block sign-ins from specific unapproved countries.

Many organizations implement strict security policies in Microsoft Entra ID (formerly Azure AD) to prevent unauthorized access from foreign countries. When you travel, your new IP address triggers this block. Connecting to the company VPN routes your traffic through an approved corporate IP, bypassing the restriction.

Contact your IT Administrator

Reach out to your organization's IT support team, explaining that you cannot access Microsoft 365 services locally from your travel destination without the VPN.

Review Entra ID Policies (For Admins)

The administrator should log into the Microsoft Entra admin center, navigate to Protection, click on Conditional Access, and review the active security policies.

Modify Location Restrictions (For Admins)

The admin should check for policies blocking access from 'Named locations' or unapproved regions. They can temporarily add an exclusion for the traveling employee's account or add the country to the approved locations list.

Security Compliance: If your organization strictly forbids direct access from foreign IP addresses for compliance reasons, you will need to continue using the company VPN for the duration of your trip.

Solution 2

Open a Microsoft Support Request

If no conditional access policies explain the regional block, the issue must be escalated to Microsoft Support to investigate hidden backend restrictions.

Free Microsoft Office alternative

Work Offline While Traveling with WPS Office

Traveling abroad often introduces unexpected network blocks and cloud sign-in issues. WPS Office provides a lightweight, highly compatible alternative that lets you view, edit, and save Word, Excel, and PowerPoint files completely offline, so your productivity isn't halted by strict conditional access policies.

1. Download and Install Offline: Get WPS Office and install it on your Mac or mobile device before or during your trip.
2. Open Microsoft Files Locally: Access your locally saved Word, Excel, and PowerPoint files without a network connection.
3. Edit Without Restrictions: Continue working seamlessly offline; changes can be synced back to the cloud later when your VPN is active.

Fully compatible with Microsoft Office formats (.docx, .xlsx, .pptx).Work entirely offline without needing a VPN or passing cloud conditional access checks.Lightweight installation suitable for Mac, Windows, and mobile devices.Free to use with a familiar interface, requiring no learning curve.

microsoft office alternative - wps office

Frequently Asked Questions

Why does Microsoft 365 block my sign-in when I travel?

Organizations often use Microsoft Entra Conditional Access to restrict logins from unexpected countries or foreign IP addresses. This is a security measure designed to protect company data from unauthorized access.

Can I bypass conditional access without contacting my IT admin?

No. Conditional access policies are enforced at the server level by your organization. Using an approved company VPN to mask your location as a domestic IP is typically the only immediate workaround you can do yourself.

Does this location block affect all Microsoft cloud apps?

Yes, if the Conditional Access policy is applied to 'All cloud apps', it will systematically block Teams, OneDrive, SharePoint, Outlook, and other Microsoft 365 services simultaneously.

Microsoft Office Security Issues