Outbound static IP addresses

ForgeRock allocates outbound static IP addresses to each of your development, staging, and production tenant environments (and your sandbox tenant environment if you have one). This lets you identify network traffic originating from Identity Cloud and from individual environments within Identity Cloud.

Having static IP addresses for outbound requests lets you implement IP allowlisting in your enterprise network. Some examples of IP allowlisting are:

Adding IP addresses to your firewall settings to restrict access to your internal APIs
Adding IP addresses to your SMTP server settings so emails sent from Identity Cloud are not marked as spam

environments ip addresses

FAQ

How are outbound static IP addresses being introduced?

Outbound static IP addresses are enabled by default if your tenant environments were created on or after the following dates:
- March 30, 2023 (sandbox environments)
- April 18, 2023 (development, staging, and production environments)
Refer to How can I find out what my outbound static IP addresses are?
Outbound static IP addresses are not enabled if your tenant environments were created between the following dates:
- May 10, 2022 and March 30, 2023 (sandbox environments)
- May 10, 2022 and April 18, 2023 (development, staging, and production environments)
Refer to How do I enable outbound static IP addresses for my tenants?.

How can I find out what my outbound static IP addresses are?

Outbound static IP addresses are enabled by default if your tenant environments were created on or after the following dates:

March 30, 2023 (sandbox environments)
April 18, 2023 (development, staging, and production environments)

To get your IP addresses:

Go to ForgeRock Support, and click ForgeRock Identity Cloud.
Click Identity Cloud: Config Request from the ForgeRock Identity Cloud options.
On the Identity Cloud: Config Request page, provide the following information:
- Hostname(s)
  - Enter a comma-separated list of FQDNs for your development, staging, and production tenant environments (and your sandbox tenant environment if you have one).
- What would you like to do?
  - Select Get outbound static IP addresses.
- Do you give permission for ForgeRock to access and make changes to your environment?
  - Select Yes to allow ForgeRock Support to access your environments.
Click Submit to create the support ticket.
ForgeRock support provides you with the IP addresses.

How do I enable outbound static IP addresses for my tenants?

Outbound static IP addresses are not enabled if your tenant environments were created between the following dates:

May 10, 2022 and March 30, 2023 (sandbox environments)
May 10, 2022 and April 18, 2023 (development, staging, and production environments)

To enable outbound static IP addresses and get your IP addresses:

Go to ForgeRock Support, and click ForgeRock Identity Cloud.
Click Identity Cloud: Config Request from the ForgeRock Identity Cloud options.
On the Identity Cloud: Config Request page, provide the following information:
- Hostname(s)
  - Enter a comma-separated list of FQDNs for your development, staging, and production tenant environments (and your sandbox tenant environment if you have one).
- What would you like to do?
  - Select Enable outbound static IP addresses.
- Do you give permission for ForgeRock to access and make changes to your environment?
  - Select Yes to allow ForgeRock Support to access your environments.
Click Submit to create the support ticket.
ForgeRock support enables outbound static IP addresses and provides you with the IP addresses.