Static IP Addresses for Allowlisting
Sep 10, 2025
Overview
The article provides details on managing static IP addresses for allowlisting on customers' proxies.
Applies To
- Static IP address
- Allowlisting
Solution
- Allowing Auth0 IPs in the user's firewall at the network level cannot be done, as Auth0 uses a dynamic set of IP Addresses and is subject to change at any time for canonical domains (domains with auth0.com) and Auth0-managed custom domains. It is recommended to implement an allow listing with the domain name instead of the IP. Enterprise customers can alternatively use the self-managed custom domains to manage the IP addresses of the domains. Then, it may be possible to implement an allow listing with the IPs managed on the customer's proxy.
- The list of IP addresses for calls made to the databases and servers by Auth0 Actions or Custom Database Scripts is documented for public cloud customers. Private cloud customers can open a support ticket to learn their outgoing IPs. These IPs can be used to implement an allow listing on customers' proxies.
- The AD Connector works by creating an outbound connection from the AD Connector to Auth0, so no IPs need to be allowed listed on customer proxies.