Logging in to business accounts from abroad without lockouts

Originally published on proxymint.

Log in to business accounts from abroad without lockouts: what login checks read, the platform route first, when a static ISP IP helps and what it cannot fix.

TL;DR

• A login from a new country is one of the first things risk engines score. Microsoft Entra lists new country, atypical travel, impossible travel and unfamiliar sign-in properties, including IP, ASN and location, as sign-in risk detections.
• The platform's own route comes first. A login for each person, an admin who knows the travel dates and a trusted location list solve most trips before any proxy is involved.
• A static ISP IP in the home country keeps the network signals steady. The account sees the same address, the same network and the same country on every login, wherever the team member is.
• Every login for the account has to take the same route. A laptop on the home IP while the phone signs in on hotel data shows two countries at once, which is exactly what travel detections look for.
• The IP does not touch the rest of the check. A new device, a 2FA prompt, GPS-based location policies, document checks and the platform's own country rules all still apply.

Key takeaways

• Tell the account admin before the trip. Travel that security knows about is a policy question; travel it discovers from an alert is an incident.
• Give each person their own login. Team access tools such as Amazon User Permissions or Stripe team roles beat a shared password on any network.
• Use one static ISP IP per team or per account set, and keep it for months. Route logins through it from the office for two weeks before anyone travels.
• Carry 2FA that works abroad. An authenticator app, a security key and printed backup codes work without a home SIM; SMS codes may not arrive on roaming.
• Never use the IP to get around a platform, bank or legal restriction. If a service blocks the country the traveller is in, a home IP does not make that access permitted.

Read the full guide on proxymint, with the commands, tables and sources.