# Tenant IP queries

**URL:** <https://developer.sailpoint.com/discuss/t/tenant-ip-queries/27864>\
**Category:** SHF Discussion and Questions\
**Tags:** saas-connector, identity-security-cloud\
**Created:** [January 29, 2024, 12:34pm UTC](https://developer.sailpoint.com/discuss/t/tenant-ip-queries/27864 "2024-01-29T12:34:46Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![RTASB](https://avatars.discourse-cdn.com/v4/letter/r/aca169/32.png) [@RTASB](https://developer.sailpoint.com/discuss/u/RTASB)\
**Post date:** [January 29, 2024, 12:34pm UTC](https://developer.sailpoint.com/discuss/t/tenant-ip-queries/27864/1 "2024-01-29T12:34:46Z")

</div>

Great to see we can now access tenant ip addresses as per [IP Address Allow List | SailPoint Developer Community](https://developer.sailpoint.com/idn/docs/global-platform-resources/ip-address-allow-list/)

Can someone provide a little more info around the following please:

- Do all the returned IP addresses need to be listed for inbound connectivity via workflows
- When the page says “ These IP Address ranges can change at any time. The implementation will need to account for this by regularily updating the allow list.”, does it mean that all returned IPs will change all at once or will it be just one or a few at a time?

Thanks

---

<div class="post-metadata">

**Author:** ![colin\_mckibben](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/colin_mckibben/32/37182_2.png) [@colin\_mckibben](https://developer.sailpoint.com/discuss/u/colin_mckibben)\
**Post date:** [January 30, 2024, 4:17pm UTC](https://developer.sailpoint.com/discuss/t/tenant-ip-queries/27864/2 "2024-01-30T16:17:31Z")

</div>

> [@RTASB](#):
>
> Do all the returned IP addresses need to be listed for inbound connectivity via workflows

Yes. We aren’t able to distinguish which IP address is being used by our services through this method. You will need to allow all IP addresses listed in the allow list in order to allow SailPoint cloud services, like SaaS connectors and Workflows, to communicate with your internal servers.

> [@RTASB](#):
>
> When the page says “ These IP Address ranges can change at any time. The implementation will need to account for this by regularily updating the allow list.”, does it mean that all returned IPs will change all at once or will it be just one or a few at a time?

It is best to plan for a scenario where all of the IP addresses will change at once. This may or may not actually happen in practice, but we cannot guarantee it.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [March 30, 2024, 4:18pm UTC](https://developer.sailpoint.com/discuss/t/tenant-ip-queries/27864/3 "2024-03-30T16:18:28Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.