Common Error Messages and Resolutions

Could not connect to Procore due to your organization's location restriction policy. Please contact your IT administrator.

Your organization's security policies include location-based access restrictions, limiting token validations to approved geographical regions. If Procore's servers or Microsoft Graph token validation requests occur outside these areas, access is blocked. This is due to your organization’s conditional access policies, which are managed by your IT team. Procore adheres to your organization’s security policies and cannot bypass them.

Contact your IT administrator to:

• Grant you an exception.

• Update the security policy to allow access from your location.

Could not save to Procore. Procore cannot access email content from non-Microsoft email providers.

Procore was unable to access your email content. This typically happens when Outlook is connected to a non-Microsoft email provider (like Gmail).

Procore uses the Microsoft Graph API, which cannot retrieve email content from mailboxes not hosted on Microsoft Exchange Online. This is a known limitation of Microsoft's Graph API and not a bug in Procore.

Contact your IT administrator to:

• Determine if your mailbox can be migrated to a Microsoft-hosted service.

• Explore alternative workflows available for your organization.

You cannot access this right now.

An active Conditional Access (CA) policy in your organization's Microsoft Entra ID (formerly Azure AD) is blocking the connection.

Contact your IT administrator to:

• Determine if there are any Conditional Access (CA) policies applied to the user or the Procore for Outlook application.

• Exclude the Procore for Outlook application from the CA policy or adjust the policy to allow access.
  Note: CA policies will only be visible to the IT administrators of your Microsoft Entra tenant.

Could not connect to Procore due to your organization's conditional access policy. Please contact your IT administrator. Continuous Access Evaluation (CAE)

Security protocols are blocking the connection in real-time.

This often occurs when Continuous Access Evaluation (CAE) is enabled, and a location-based policy is triggered.

To confirm this, click Show technical details in the error banner. If the error code includes LocationConditionEvaluationSatisfied, it confirms that Microsoft Entra detected a network location change that violates your organization's location policies.
 

Contact your IT administrator to:

• Review Continuous Access Evaluation (CAE) settings in Microsoft Entra.

• Ensure that location-based policies are configured using IP addresses rather than GPS/named locations, as Microsoft recommends IP-based enforcement for stable CAE compatibility.

See Microsoft's Continuous access evaluation support article for details on implementation and updating your existing policies.