Skip to main content
This guide shows how to open the IP allowlist in the Console, read the status of the list, and deactivate it.

​
Before you start

You need the security permission with the get action to open the page and the put action to change the list. Lerian’s default administrator role has both. Without get, the page shows “You are not authorized to access this page.”

​
Open the IP allowlist tab

1

Open Settings

Click the gear icon () in the top navigation bar.
2

Select Security

Select Security in the Settings sidebar. The page title is “Security”.
3

Select the IP allowlist tab

The page opens on the Single Sign-On tab. Select the IP allowlist tab. You can also open the path /settings/security?tab=ip-allowlist directly.
The Security page in the Console, open on the IP allowlist tab. The amber banner reads "IP allowlist inactive" and the empty-state box reads "No IP addresses registered. While the list is empty, access is not restricted."

Figure 1. The IP allowlist tab with an empty list

​
Read the page

The tab subtitle reads “Restrict platform access to a list of trusted IP addresses.” A status banner tells you whether the platform enforces the list now: The Deactivate button appears above the list when the list has at least one entry.

​
Deactivate the list

Deactivation clears every entry and allows access from any address again.
1

Click Deactivate

Click Deactivate above the table.
2

Confirm

The dialog “Deactivate the IP allowlist?” reads “This clears every entry and allows access from any IP address again.” Click Yes, deactivate.
The dialog "Deactivate the IP allowlist?" over the Security page. The body reads "This clears every entry and allows access from any IP address again." The buttons read "I changed my mind" and "Yes, deactivate".

Figure 2. The deactivation dialog

​
Messages the Console shows

After a successful change, the Console shows “IP allowlist updated”. When the platform refuses a change, the Console shows the refusal in a notification. The API errors list the causes.

IP allowlist

What the feature protects, how it decides, and what it does not cover.

Manage the list via API

Read and replace the list with two Identity API operations.